%23%23%20Le%20probl%C3%A8me%0A%0A%0ADe%20multiples%20acteurs%20interviennent%20dans%20le%20suivi%20des%20d%C3%A9marches%20mini%C3%A8res.%20Il%20est%20n%C3%A9cessaire%20d%27avoir%20un%20outils%20de%20gestion%20unifi%C3%A9%20pour%20r%C3%A9unir%20l%27ensemble%20des%20ces%20acteurs%20autour%20de%20la%20vie%20des%20projets%20miniers.%0A%0A%0A%23%23%20La%20solution%0A%0ACamino%20%3A%20le%20%2Acadastre%20minier%20num%C3%A9rique%20ouvert%2A%2C%20ambitionne%20d%27ouvrir%20les%20donn%C3%A9es%20du%20domaine%20minier%20pour%20partager%20l%27information%20sur%20les%20projets%20et%20faciliter%20leur%20gestion.%0A%0AAvec%20Camino%2C%20il%20est%20enfin%20possible%2C%20pour%20tous%20les%20utilisateurs%2C%20de%20consulter%20les%20titres%20miniers%20et%20leurs%20caract%C3%A9ristiques%20sur%20une%20carte%20%C3%A0%20jour%20et%20de%20suivre%20les%20projets%20en%20cours%20sur%20un%20tableau%20de%20bord.%0AAvec%20ce%20r%C3%A9f%C3%A9rentiel%20commun%20ouvert%20et%20partag%C3%A9%20des%20dossiers%20miniers%20et%20des%20autorisations%20administratives%20associ%C3%A9es%2C%20Camino%20r%C3%A9soud%20les%20difficult%C3%A9s%20de%20ses%203%20utilisateurs%20principaux%20%3A%20les%20entreprises%2C%20les%20citoyens%20et%20les%20agents%20publics%20%3A%0A%0A%20-%20%2A%2ALes%20entreprises%20mini%C3%A8res%2A%2A%20peuvent%20connaitre%20l%E2%80%99%C3%A9tat%20du%20domaine%20minier%20puis%20d%C3%A9poser%20en%20ligne%20leurs%20demandes%2C%20les%20rapports%20et%20les%20donn%C3%A9es%20r%C3%A9glementaires.%20Elles%20peuvent%20aussi%20visualiser%20l%E2%80%99avancement%20des%20instructions%2C%20suivre%20leur%20portefeuille%20de%20titres%20et%20r%C3%A9pondre%20simplement%20%C3%A0%20leurs%20obligations%20%C3%A0%20chaque%20%C3%A9tape%20des%20projets.%0A%20-%20%2A%2ALes%20agents%20publics%2A%2A%20peuvent%20simplement%20acc%C3%A9der%20aux%20m%C3%AAmes%20dossiers%20et%20donn%C3%A9es%20partag%C3%A9s%20entre%20les%20services%20des%20administrations%20et%20op%C3%A9rateurs%20publics.%20Il%20est%20possible%20de%20co-instruire%20les%20demandes%2C%20de%20suivre%20et%20anticiper%20chaque%20moment%20de%20vie%20d%E2%80%99un%20projet%2C%20de%20trouver%20et%20valoriser%20les%20donn%C3%A9es%20sur%20le%20domaine%20minier%20national%20simplement%20et%20sans%20interm%C3%A9diaire.%0A%20-%20%2A%2ALes%20ONG%2C%20les%20citoyens%20et%20leurs%20%C3%A9lus%2A%2A%20peuvent%20consulter%20%C3%A0%20tout%20moment%20les%20dossiers%20et%20les%20donn%C3%A9es%20publiques%2C%20%C3%A0%20l%E2%80%99%C3%A9chelle%20de%20leur%20territoire%20pour%20mieux%20contribuer%2C%20sans%20pr%C3%A9cipitation%2C%20aux%20proc%C3%A9dures%20de%20participation%20du%20public%20et%20suivre%20de%20mani%C3%A8re%20transparente%20l%E2%80%99actualit%C3%A9%20des%20projets.%0A%0A%20%3Ca%20href%3D%22https%3A%2F%2Fcamino.beta.gouv.fr%2F%22%20target%3D%22_top%22%3ED%C3%A9couvrez%20ce%20produit%21%3C%2Fa%3E%0A%0A%23%23%20L%27impact%0A%0ACamino%20en%202023%20c%27est%20%3A%0A%20-%20%2A%2A100%25%2A%2A%20des%20usagers%20op%C3%A9rateurs%20miniers%20et%20agents%20d%E2%80%99administration%20disposant%20d%E2%80%99un%20tableau%20de%20bord%20de%20leur%20activit%C3%A9%0A%20%20-%20%2A%2A100%25%2A%2A%20des%20proc%C3%A9dures%20des%20PEX%20g%C3%A9othermie%20pouvant%20%C3%AAtre%20instruites%20en%20ligne%0A%0A%20Les%20objectifs%20pour%202024%3A%0A%20-%20%2A%2A100%25%2A%2A%20des%20proc%C3%A9dures%20d%E2%80%99octroi%20et%20de%20prolongation%20des%20concessions%20et%20PER%20pouvant%20%C3%AAtre%20instruites%20conform%C3%A9ment%20%C3%A0%20la%20r%C3%A9forme%20du%20code%20minier%0A%20-%20%2A%2A100%25%2A%2A%20des%20PEX%20g%C3%A9othermie%20valides%20de%20la%20DREAL%20ARA%20en%20ligne%20avec%20leur%20donn%C3%A9es%20sp%C3%A9cifiques%20%28volume%20d%E2%80%99exploitation%2C%20puissance%2C%20etc%29%0A%2A%2A100%25%2A%2A%20des%20taxes%20sur%20les%20substances%20des%20titres%20de%20la%20DREAL%20Grand-Est%20calcul%C3%A9es%20automatiquement.%0A%20%0A%20Pour%20voir%20les%20diff%C3%A9rentes%20statistiques%20de%20Camino%2C%20c%27est%20%3Ca%20href%3D%22https%3A%2F%2Fcamino.beta.gouv.fr%2Fstatistiques%2Fglobales%22%20target%3D%22_top%22%3Eici%3C%2Fa%3E%0A%0A%0AVous%20%C3%AAtes%20en%20charge%20de%20dossiers%20miniers%2C%20vous%20%C3%AAtes%20int%C3%A9ress%C3%A9s%20pour%20participer%20%C3%A0%20l%27am%C3%A9lioration%20de%20ce%20service%20%3F%20%3Ca%20href%3D%22mailto%3Acontact%40camino.beta.gouv.fr%3FSubject%3DCamino%2520m%27int%C3%A9resse%2520%21%22%20target%3D%22_top%22%3EContactez-nous%20%21%3C%2Fa%3E%0A

Camino

investigation

construction

acceleration

Log entry depends on a user-provided value.

Building log entries from user-controlled sources is vulnerable to insertion of forged log entries by a malicious user.

js/log-injection

CodeQL

Insecure creation of file in the os temp dir.

Creating a temporary file that is accessible by other users can lead to information disclosure and sometimes remote code execution.

js/insecure-temporary-file

Actions Job or Workflow does not set permissions

Workflows should contain permissions to provide a clear understanding has permissions to run the workflow.

actions/missing-workflow-permissions

http

arepa-cas

DNS SaaS Service Detection

SPF Record - Detection

A DNS TXT record was detected. The TXT record lets a domain admin leave notes on a DNS server.

DNS TXT Record Detected

An MX record was detected. MX records direct emails to a mail exchange server.

MX Record Detection

A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.

CAA Record

An NS record was detected. An NS record delegates a subdomain to a set of name servers.

NS Record Detection

Wappalyzer Technology Detection

This template searches for missing HTTP security headers. The impact of these missing headers can vary.


HTTP Missing Security Headers

WAF Detection

GraphQL API Detection

OpenSSH Service - Detect

Extract the issuer's organization from the target's certificate. Issuers are entities which sign and distribute certificates.


Detect SSL Certificate Issuer

Extract the Subject Alternative Name (SAN) from the target's certificate. SAN facilitates the usage of additional hostnames with the same certificate.


SSL DNS Names

TLS version detection is a security process used to determine the version of the Transport Layer Security (TLS) protocol used by a computer or server.
It is important to detect the TLS version in order to ensure secure communication between two computers or servers.


TLS Version - Detect

Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.

Nginx

Mailjet is an email delivery service for marketing and developer teams.

Mailjet

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

flag	country	hostname	ip	city
	France	api.camino.beta.gouv.fr	91.134.91.128	?

https://api.camino.beta.gouv.fr

Système de design de l'état

Eco-index

GES: 1.6 gramme(s) par visite

Eau : 2.4 cl par visite

Ça veut dire quoi ?

Cookiesenviron 6 heures

Scripts tiersenviron 6 heures

Ouverture du code source

Le dépôt de code est ouvert : https://gitlab-forge.din.developpement-durable.gouv.fr/pub/pnm-public/camino