[{"data":1,"prerenderedAt":986},["ShallowReactive",2],{"/fr-fr/blog/categories/security/page/4":3,"navigation-fr-fr":21,"banner-fr-fr":455,"footer-fr-fr":463,"security-category-page-total-items-fr-fr":702,"security-category-page-featured-fr-fr":703,"security-category-page-4-fr-fr":924},{"id":4,"title":5,"body":6,"category":6,"config":7,"content":11,"description":6,"extension":13,"meta":14,"navigation":15,"path":16,"seo":17,"slug":6,"stem":19,"testContent":6,"type":6,"__hash__":20},"blogCategories/fr-fr/blog/categories/security.yml","Security",null,{"template":8,"slug":9,"hide":10},"BlogCategory","security",false,{"name":12},"Sécurité","yml",{},true,"/fr-fr/blog/categories/security",{"title":12,"description":18},"Browse articles related to Sécurité on the GitLab Blog","fr-fr/blog/categories/security","w53e73P2QHMFJINqvUAC204SXUgtVy7XBivdu5WQyqo",{"logo":22,"freeTrial":27,"sales":32,"login":37,"items":42,"search":370,"minimal":406,"duo":425,"switchNav":434,"pricingDeployment":445},{"config":23},{"href":24,"dataGaName":25,"dataGaLocation":26},"/fr-fr/","gitlab logo","header",{"text":28,"config":29},"Commencer un essai gratuit",{"href":30,"dataGaName":31,"dataGaLocation":26},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/fr-fr&glm_content=default-saas-trial/","free trial",{"text":33,"config":34},"Demander une démo",{"href":35,"dataGaName":36,"dataGaLocation":26},"/fr-fr/sales/?contact-topic=request-demo","sales",{"text":38,"config":39},"Connexion",{"href":40,"dataGaName":41,"dataGaLocation":26},"https://gitlab.com/users/sign_in/","sign in",[43,72,173,178,292,348],{"text":44,"config":45,"menu":47},"Plateforme",{"dataNavLevelOne":46},"platform",{"type":48,"columns":49},"cards",[50,56,64],{"title":44,"description":51,"link":52},"La plateforme d'orchestration intelligente pour le DevSecOps",{"text":53,"config":54},"Explorer notre plateforme",{"href":55,"dataGaName":46,"dataGaLocation":26},"/fr-fr/platform/",{"title":57,"description":58,"link":59},"GitLab Duo Agent Platform","L'IA agentique pour l'ensemble du cycle de développement logiciel",{"text":60,"config":61},"Découvrir GitLab Duo",{"href":62,"dataGaName":63,"dataGaLocation":26},"/fr-fr/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":65,"description":66,"link":67},"Pourquoi GitLab ?","Découvrez les principales raisons pour lesquelles les entreprises choisissent GitLab",{"text":68,"config":69},"En savoir plus",{"href":70,"dataGaName":71,"dataGaLocation":26},"/fr-fr/why-gitlab/","why gitlab",{"text":73,"left":15,"config":74,"menu":76},"Produit",{"dataNavLevelOne":75},"solutions",{"type":77,"link":78,"columns":82,"feature":152},"lists",{"text":79,"config":80},"Voir toutes les solutions",{"href":81,"dataGaName":75,"dataGaLocation":26},"/fr-fr/solutions/",[83,108,130],{"title":84,"description":85,"link":86,"items":91},"Automatisation","CI/CD et automatisation pour accélérer le déploiement",{"config":87},{"icon":88,"href":89,"dataGaName":90,"dataGaLocation":26},"AutomatedCodeAlt","/fr-fr/solutions/delivery-automation/","automated software delivery",[92,96,99,104],{"text":93,"config":94},"CI/CD",{"href":95,"dataGaLocation":26,"dataGaName":93},"/fr-fr/solutions/continuous-integration/",{"text":57,"config":97},{"href":62,"dataGaLocation":26,"dataGaName":98},"gitlab duo agent platform - product menu",{"text":100,"config":101},"Gestion du code source",{"href":102,"dataGaLocation":26,"dataGaName":103},"/fr-fr/solutions/source-code-management/","Source Code Management",{"text":105,"config":106},"Livraison de logiciels automatisée",{"href":89,"dataGaLocation":26,"dataGaName":107},"Automated software delivery",{"title":12,"description":109,"link":110,"items":115},"Livrez du code plus rapidement sans compromettre la sécurité",{"config":111},{"href":112,"dataGaName":113,"dataGaLocation":26,"icon":114},"/fr-fr/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[116,120,125],{"text":117,"config":118},"Tests de sécurité des applications",{"href":112,"dataGaName":119,"dataGaLocation":26},"Application security testing",{"text":121,"config":122},"Sécurité de la chaîne d'approvisionnement logicielle",{"href":123,"dataGaLocation":26,"dataGaName":124},"/fr-fr/solutions/supply-chain/","Software supply chain security",{"text":126,"config":127},"Conformité logicielle",{"href":128,"dataGaName":129,"dataGaLocation":26},"/fr-fr/solutions/software-compliance/","software compliance",{"title":131,"link":132,"items":137},"Mesures",{"config":133},{"icon":134,"href":135,"dataGaName":136,"dataGaLocation":26},"DigitalTransformation","/fr-fr/solutions/visibility-measurement/","visibility and measurement",[138,142,147],{"text":139,"config":140},"Visibilité et mesures",{"href":135,"dataGaLocation":26,"dataGaName":141},"Visibility and Measurement",{"text":143,"config":144},"Gestion de la chaîne de valeur",{"href":145,"dataGaLocation":26,"dataGaName":146},"/fr-fr/solutions/value-stream-management/","Value Stream Management",{"text":148,"config":149},"Analyses et informations",{"href":150,"dataGaLocation":26,"dataGaName":151},"/fr-fr/solutions/analytics-and-insights/","Analytics and insights",{"title":153,"type":77,"items":154},"GitLab",[155,161,167],{"text":156,"config":157},"Entreprises",{"icon":158,"href":159,"dataGaLocation":26,"dataGaName":160},"Building","/fr-fr/enterprise/","enterprise",{"text":162,"config":163},"Pour les PME",{"icon":164,"href":165,"dataGaLocation":26,"dataGaName":166},"Work","/fr-fr/small-business/","small business",{"text":168,"config":169},"Pour le secteur public",{"icon":170,"href":171,"dataGaLocation":26,"dataGaName":172},"Organization","/fr-fr/solutions/public-sector/","public sector",{"text":174,"config":175},"Tarifs",{"href":176,"dataGaName":177,"dataGaLocation":26,"dataNavLevelOne":177},"/fr-fr/pricing/","pricing",{"text":179,"config":180,"menu":182},"Ressources",{"dataNavLevelOne":181},"resources",{"type":77,"link":183,"columns":187,"feature":281},{"text":184,"config":185},"Afficher toutes les ressources",{"href":186,"dataGaName":181,"dataGaLocation":26},"/fr-fr/resources/",[188,221,248],{"title":189,"items":190},"Premiers pas",[191,196,201,206,211,216],{"text":192,"config":193},"Installation",{"href":194,"dataGaName":195,"dataGaLocation":26},"/fr-fr/install/","install",{"text":197,"config":198},"Guides de démarrage",{"href":199,"dataGaName":200,"dataGaLocation":26},"/fr-fr/get-started/","quick setup checklists",{"text":202,"config":203},"Apprentissage",{"href":204,"dataGaLocation":26,"dataGaName":205},"https://university.gitlab.com/","learn",{"text":207,"config":208},"Documentation",{"href":209,"dataGaName":210,"dataGaLocation":26},"https://docs.gitlab.com/","product documentation",{"text":212,"config":213},"Vidéos sur les bonnes pratiques",{"href":214,"dataGaName":215,"dataGaLocation":26},"/fr-fr/getting-started-videos/","best practice videos",{"text":217,"config":218},"Intégrations",{"href":219,"dataGaName":220,"dataGaLocation":26},"/fr-fr/integrations/","integrations",{"title":222,"items":223},"Découvrir",[224,229,234,239,243],{"text":225,"config":226},"Témoignages clients",{"href":227,"dataGaName":228,"dataGaLocation":26},"/fr-fr/customers/","customer success stories",{"text":230,"config":231},"Blog",{"href":232,"dataGaName":233,"dataGaLocation":26},"/fr-fr/blog/","blog",{"text":235,"config":236},"Demo Hub",{"href":237,"dataGaName":238,"dataGaLocation":26},"/fr-fr/demo-hub/","demo hub",{"text":240,"config":241},"The Source",{"href":242,"dataGaName":233,"dataGaLocation":26},"/fr-fr/the-source/",{"text":244,"config":245},"Travail à distance",{"href":246,"dataGaName":247,"dataGaLocation":26},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":249,"items":250},"Connecter",[251,256,261,266,271,276],{"text":252,"config":253},"Services GitLab",{"href":254,"dataGaName":255,"dataGaLocation":26},"/fr-fr/services/","services",{"text":257,"config":258},"Contribuer",{"href":259,"dataGaName":260,"dataGaLocation":26},"https://contributors.gitlab.com","contribute",{"text":262,"config":263},"Communauté",{"href":264,"dataGaName":265,"dataGaLocation":26},"/community/","community",{"text":267,"config":268},"Forum",{"href":269,"dataGaName":270,"dataGaLocation":26},"https://forum.gitlab.com/","forum",{"text":272,"config":273},"Événements",{"href":274,"dataGaName":275,"dataGaLocation":26},"/events/","events",{"text":277,"config":278},"Partenaires",{"href":279,"dataGaName":280,"dataGaLocation":26},"/fr-fr/partners/","partners",{"config":282,"title":285,"text":286,"link":287},{"background":283,"textColor":284},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","Nouveautés de GitLab","Découvrez les dernières fonctionnalités et améliorations.",{"text":288,"config":289},"Lire les articles les plus récents",{"href":290,"dataGaName":291,"dataGaLocation":26},"/fr-fr/whats-new/","whats new",{"text":293,"config":294,"menu":296},"Société",{"dataNavLevelOne":295},"company",{"type":77,"columns":297},[298],{"items":299},[300,305,311,313,318,323,328,333,338,343],{"text":301,"config":302},"À propos",{"href":303,"dataGaName":304,"dataGaLocation":26},"/fr-fr/company/","about",{"text":306,"config":307,"footerGa":310},"Carrières",{"href":308,"dataGaName":309,"dataGaLocation":26},"/jobs/","jobs",{"dataGaName":309},{"text":272,"config":312},{"href":274,"dataGaName":275,"dataGaLocation":26},{"text":314,"config":315},"Leadership",{"href":316,"dataGaName":317,"dataGaLocation":26},"/company/team/e-group/","leadership",{"text":319,"config":320},"Manuel",{"href":321,"dataGaName":322,"dataGaLocation":26},"https://handbook.gitlab.com/","handbook",{"text":324,"config":325},"Relations avec les investisseurs",{"href":326,"dataGaName":327,"dataGaLocation":26},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":329,"config":330},"Trust Center",{"href":331,"dataGaName":332,"dataGaLocation":26},"/fr-fr/security/","trust center",{"text":334,"config":335},"Centre pour la transparence de l'IA",{"href":336,"dataGaName":337,"dataGaLocation":26},"/fr-fr/ai-transparency-center/","ai transparency center",{"text":339,"config":340},"Newsletter",{"href":341,"dataGaName":342,"dataGaLocation":26},"/company/contact/#contact-forms","newsletter",{"text":344,"config":345},"Presse",{"href":346,"dataGaName":347,"dataGaLocation":26},"/press/","press",{"text":349,"config":350,"menu":351},"Nous contacter",{"dataNavLevelOne":295},{"type":77,"columns":352},[353],{"items":354},[355,360,365],{"text":356,"config":357},"Contacter l'équipe commerciale",{"href":358,"dataGaName":359,"dataGaLocation":26},"/fr-fr/sales/","talk to sales",{"text":361,"config":362},"Assistance GitLab",{"href":363,"dataGaName":364,"dataGaLocation":26},"https://support.gitlab.com/hc/en-us","support portal",{"text":366,"config":367},"Portail clients GitLab",{"href":368,"dataGaName":369,"dataGaLocation":26},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":371,"login":372,"suggestions":379},"Fermer",{"text":373,"link":374},"Pour rechercher des dépôts et des projets, connectez-vous à",{"text":375,"config":376},"GitLab.com",{"href":40,"dataGaName":377,"dataGaLocation":378},"search login","search",{"text":380,"default":381},"Suggestions",[382,385,390,392,397,402],{"text":57,"config":383},{"href":62,"dataGaName":384,"dataGaLocation":378},"GitLab Duo Agent Platform",{"text":386,"config":387},"Suggestions de code (IA)",{"href":388,"dataGaName":389,"dataGaLocation":378},"/fr-fr/solutions/code-suggestions/","Code Suggestions (AI)",{"text":93,"config":391},{"href":95,"dataGaName":93,"dataGaLocation":378},{"text":393,"config":394},"GitLab sur AWS",{"href":395,"dataGaName":396,"dataGaLocation":378},"/fr-fr/partners/technology-partners/aws/","GitLab on AWS",{"text":398,"config":399},"GitLab sur Google Cloud",{"href":400,"dataGaName":401,"dataGaLocation":378},"/fr-fr/partners/technology-partners/google-cloud-platform/","GitLab on Google Cloud",{"text":403,"config":404},"Pourquoi utiliser GitLab ?",{"href":70,"dataGaName":405,"dataGaLocation":378},"Why GitLab?",{"freeTrial":407,"mobileIcon":412,"desktopIcon":417,"secondaryButton":420},{"text":408,"config":409},"Commencer votre essai gratuit",{"href":410,"dataGaName":31,"dataGaLocation":411},"https://gitlab.com/-/trials/new/","nav",{"altText":413,"config":414},"Icône GitLab",{"src":415,"dataGaName":416,"dataGaLocation":411},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":413,"config":418},{"src":419,"dataGaName":416,"dataGaLocation":411},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":421,"config":422},"Commencer",{"href":423,"dataGaName":424,"dataGaLocation":411},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/fr-fr/get-started/","get started",{"freeTrial":426,"mobileIcon":430,"desktopIcon":432},{"text":427,"config":428},"En savoir plus sur GitLab Duo",{"href":62,"dataGaName":429,"dataGaLocation":411},"gitlab duo",{"altText":413,"config":431},{"src":415,"dataGaName":416,"dataGaLocation":411},{"altText":413,"config":433},{"src":419,"dataGaName":416,"dataGaLocation":411},{"button":435,"mobileIcon":440,"desktopIcon":442},{"text":436,"config":437},"/switch",{"href":438,"dataGaName":439,"dataGaLocation":411},"#contact","switch",{"altText":413,"config":441},{"src":415,"dataGaName":416,"dataGaLocation":411},{"altText":413,"config":443},{"src":444,"dataGaName":416,"dataGaLocation":411},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":446,"mobileIcon":451,"desktopIcon":453},{"text":447,"config":448},"Retour aux tarifs",{"href":176,"dataGaName":449,"dataGaLocation":411,"icon":450},"back to pricing","GoBack",{"altText":413,"config":452},{"src":415,"dataGaName":416,"dataGaLocation":411},{"altText":413,"config":454},{"src":419,"dataGaName":416,"dataGaLocation":411},{"title":456,"button":457,"config":461},"GitLab Orbit est arrivé : la couche de contexte pour les agents d'IA.",{"text":68,"config":458},{"href":459,"dataGaName":460,"dataGaLocation":26},"/fr-fr/gitlab-orbit/","orbit",{"layout":462,"disabled":10},"release",{"data":464},{"text":465,"source":466,"edit":472,"contribute":477,"config":481,"items":486,"minimal":694},"Git est une marque déposée de Software Freedom Conservancy et notre utilisation de « GitLab » est sous licence.",{"text":467,"config":468},"Afficher le code source de la page",{"href":469,"dataGaName":470,"dataGaLocation":471},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":473,"config":474},"Modifier cette page",{"href":475,"dataGaName":476,"dataGaLocation":471},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":257,"config":478},{"href":479,"dataGaName":480,"dataGaLocation":471},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":482,"facebook":483,"youtube":484,"linkedin":485},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[487,533,586,629,661],{"title":174,"links":488,"subMenu":503},[489,493,498],{"text":490,"config":491},"Voir les forfaits",{"href":176,"dataGaName":492,"dataGaLocation":471},"view plans",{"text":494,"config":495},"GitLab Premium",{"href":496,"dataGaName":497,"dataGaLocation":471},"/fr-fr/pricing/premium/","why premium",{"text":499,"config":500},"GitLab Ultimate",{"href":501,"dataGaName":502,"dataGaLocation":471},"/fr-fr/pricing/ultimate/","why ultimate",[504],{"title":349,"links":505},[506,508,510,513,518,523,528],{"text":356,"config":507},{"href":358,"dataGaName":36,"dataGaLocation":471},{"text":361,"config":509},{"href":363,"dataGaName":364,"dataGaLocation":471},{"text":511,"config":512},"Portail clients",{"href":368,"dataGaName":369,"dataGaLocation":471},{"text":514,"config":515},"Statut",{"href":516,"dataGaName":517,"dataGaLocation":471},"https://status.gitlab.com/","status",{"text":519,"config":520},"Conditions d'utilisation",{"href":521,"dataGaName":522,"dataGaLocation":471},"/terms/","terms of use",{"text":524,"config":525},"Politique de confidentialité",{"href":526,"dataGaName":527,"dataGaLocation":471},"/fr-fr/privacy/","privacy statement",{"text":529,"config":530},"Gestion des cookies",{"dataGaName":531,"dataGaLocation":471,"id":532,"isOneTrustButton":15},"cookie preferences","ot-sdk-btn",{"title":73,"links":534,"subMenu":543},[535,539],{"text":536,"config":537},"Plateforme DevSecOps",{"href":55,"dataGaName":538,"dataGaLocation":471},"devsecops platform",{"text":540,"config":541},"Développement assisté par l'IA",{"href":62,"dataGaName":542,"dataGaLocation":471},"ai-assisted development",[544],{"title":545,"links":546},"Thèmes",[547,551,556,561,566,571,576,581],{"text":93,"config":548},{"href":549,"dataGaName":550,"dataGaLocation":471},"/fr-fr/topics/ci-cd/","cicd",{"text":552,"config":553},"GitOps",{"href":554,"dataGaName":555,"dataGaLocation":471},"/fr-fr/topics/gitops/","gitops",{"text":557,"config":558},"DevOps",{"href":559,"dataGaName":560,"dataGaLocation":471},"/fr-fr/topics/devops/","devops",{"text":562,"config":563},"Contrôle de version",{"href":564,"dataGaName":565,"dataGaLocation":471},"/fr-fr/topics/version-control/","version control",{"text":567,"config":568},"DevSecOps",{"href":569,"dataGaName":570,"dataGaLocation":471},"/fr-fr/topics/devsecops/","devsecops",{"text":572,"config":573},"Cloud-native",{"href":574,"dataGaName":575,"dataGaLocation":471},"/fr-fr/topics/cloud-native/","cloud native",{"text":577,"config":578},"IA pour la programmation",{"href":579,"dataGaName":580,"dataGaLocation":471},"/fr-fr/topics/devops/ai-for-coding/","ai for coding",{"text":582,"config":583},"IA agentique",{"href":584,"dataGaName":585,"dataGaLocation":471},"/fr-fr/topics/agentic-ai/","agentic ai",{"title":587,"links":588},"Solutions",[589,592,594,599,602,605,608,611,613,616,619,624],{"text":117,"config":590},{"href":112,"dataGaName":591,"dataGaLocation":471},"Application Security Testing",{"text":105,"config":593},{"href":89,"dataGaName":90,"dataGaLocation":471},{"text":595,"config":596},"Développement Agile",{"href":597,"dataGaName":598,"dataGaLocation":471},"/fr-fr/solutions/agile-delivery/","agile delivery",{"text":100,"config":600},{"href":102,"dataGaName":601,"dataGaLocation":471},"source code management",{"text":93,"config":603},{"href":95,"dataGaName":604,"dataGaLocation":471},"continuous integration & delivery",{"text":143,"config":606},{"href":145,"dataGaName":607,"dataGaLocation":471},"value stream management",{"text":552,"config":609},{"href":610,"dataGaName":555,"dataGaLocation":471},"/fr-fr/solutions/gitops/",{"text":156,"config":612},{"href":159,"dataGaName":160,"dataGaLocation":471},{"text":614,"config":615},"PME",{"href":165,"dataGaName":166,"dataGaLocation":471},{"text":617,"config":618},"Secteur public",{"href":171,"dataGaName":172,"dataGaLocation":471},{"text":620,"config":621},"Éducation",{"href":622,"dataGaName":623,"dataGaLocation":471},"/fr-fr/solutions/education/","education",{"text":625,"config":626},"Services financiers",{"href":627,"dataGaName":628,"dataGaLocation":471},"/fr-fr/solutions/finance/","financial services",{"title":179,"links":630},[631,633,635,637,640,642,645,647,649,651,653,655,657,659],{"text":192,"config":632},{"href":194,"dataGaName":195,"dataGaLocation":471},{"text":197,"config":634},{"href":199,"dataGaName":200,"dataGaLocation":471},{"text":202,"config":636},{"href":204,"dataGaName":205,"dataGaLocation":471},{"text":207,"config":638},{"href":209,"dataGaName":639,"dataGaLocation":471},"docs",{"text":230,"config":641},{"href":232,"dataGaName":233,"dataGaLocation":471},{"text":643,"config":644},"Nouveautés",{"href":290,"dataGaName":291,"dataGaLocation":471},{"text":225,"config":646},{"href":227,"dataGaName":228,"dataGaLocation":471},{"text":244,"config":648},{"href":246,"dataGaName":247,"dataGaLocation":471},{"text":252,"config":650},{"href":254,"dataGaName":255,"dataGaLocation":471},{"text":257,"config":652},{"href":259,"dataGaName":260,"dataGaLocation":471},{"text":262,"config":654},{"href":264,"dataGaName":265,"dataGaLocation":471},{"text":267,"config":656},{"href":269,"dataGaName":270,"dataGaLocation":471},{"text":272,"config":658},{"href":274,"dataGaName":275,"dataGaLocation":471},{"text":277,"config":660},{"href":279,"dataGaName":280,"dataGaLocation":471},{"title":293,"links":662},[663,665,667,669,671,673,678,683,685,687,689],{"text":301,"config":664},{"href":303,"dataGaName":295,"dataGaLocation":471},{"text":306,"config":666},{"href":308,"dataGaName":309,"dataGaLocation":471},{"text":314,"config":668},{"href":316,"dataGaName":317,"dataGaLocation":471},{"text":319,"config":670},{"href":321,"dataGaName":322,"dataGaLocation":471},{"text":324,"config":672},{"href":326,"dataGaName":327,"dataGaLocation":471},{"text":674,"config":675},"Développement durable",{"href":676,"dataGaName":677,"dataGaLocation":471},"/sustainability/","Sustainability",{"text":679,"config":680},"Diversité, inclusion et appartenance (DIB)",{"href":681,"dataGaName":682,"dataGaLocation":471},"/fr-fr/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":329,"config":684},{"href":331,"dataGaName":332,"dataGaLocation":471},{"text":339,"config":686},{"href":341,"dataGaName":342,"dataGaLocation":471},{"text":344,"config":688},{"href":346,"dataGaName":347,"dataGaLocation":471},{"text":690,"config":691},"Déclaration de transparence sur l'esclavage moderne",{"href":692,"dataGaName":693,"dataGaLocation":471},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":695},[696,698,700],{"text":519,"config":697},{"href":521,"dataGaName":522,"dataGaLocation":471},{"text":529,"config":699},{"dataGaName":531,"dataGaLocation":471,"id":532,"isOneTrustButton":15},{"text":524,"config":701},{"href":526,"dataGaName":527,"dataGaLocation":471},45,{"id":704,"title":705,"authors":706,"body":708,"category":9,"date":906,"description":907,"extension":908,"externalUrl":6,"faq":6,"featured":10,"heroImage":909,"meta":910,"navigation":15,"path":911,"seo":912,"slug":916,"stem":917,"tags":918,"template":922,"updatedDate":6,"__hash__":923},"blogPosts/fr-fr/blog/gitlab-duo-security-review-flow.md","Le flow GitLab Duo Security Review détecte les failles logiques que les scanners n'identifient pas",[707],"Mark Settle",{"type":709,"value":710,"toc":898},"minimark",[711,715,718,723,726,740,746,752,755,759,762,765,770,779,783,787,795,798,801,835,847,850,854,857,866,886,889],[712,713,714],"p",{},"Les scanners statiques excellent dans la détection des vulnérabilités qui correspondent à un modèle connu : entrées de requête non validées, secrets codés en dur, désérialisation non sécurisée. En revanche, ils peinent à détecter les failles dans la logique de votre application, où il n'existe aucun modèle à faire correspondre, seulement du code valide qui fonctionne de manière inappropriée pour votre domaine. Si elles ne sont pas détectées, ces failles apparaissent tardivement et sont plus coûteuses à corriger.",[712,716,717],{},"Le flow Security Review, désormais disponible en version bêta publique, examine les modifications de code comme le ferait un ingénieur en sécurité. Il analyse l'intention au lieu de comparer des signatures, afin de détecter les failles logiques avant qu'elles n'atteignent l'environnement de production. Il s'agit d'une avancée majeure pour identifier les failles dangereuses que les scanners manquent habituellement.",[719,720,722],"h2",{"id":721},"les-limites-des-scanners-basés-sur-des-modèles","Les limites des scanners basés sur des modèles",[712,724,725],{},"Les vulnérabilités applicatives les plus préjudiciables semblent souvent correctes ligne par ligne, mais enfreignent un contexte que le code ne contient pas, comme votre modèle d'autorisation, vos règles de sensibilité des données et vos workflows prévus. Voici trois des catégories de vulnérabilités les plus courantes :",[712,727,728,732,733,739],{},[729,730,731],"strong",{},"Accès et autorisation :"," la possibilité pour un utilisateur de lire ou de modifier une ressource est définie par votre modèle d'autorisation, et non par une construction du langage. La Broken Object Level Authorization (faille d'autorisation donnant accès aux données d'un autre utilisateur en modifiant un identifiant) figure en tête du classement ",[734,735,738],"a",{"href":736,"rel":737},"https://owasp.org/API-Security/editions/2023/fr/0x11-t10/",[],"OWASP API Security Top 10"," depuis 2019.",[712,741,742,745],{},[729,743,744],{},"Exposition des données :"," sérialiser un objet et le renvoyer est un code courant, d'apparence correcte. La question de savoir s'il divulgue des informations dépend des champs sensibles et de leurs destinataires, des éléments propres à votre domaine, et non à votre syntaxe.",[712,747,748,751],{},[729,749,750],{},"Flux de contrôle et workflow :"," les failles de logique métier et les conditions de concurrence surviennent lorsque des opérations valides s'exécutent dans le mauvais ordre, se répètent de façon inattendue ou sont manipulées. Exemples : processus de paiement contournable, état réactivé en raison d'une condition de concurrence ou paramètre modifié pour changer un prix.",[712,753,754],{},"Jusqu'à présent, la détection de ces failles nécessitait une revue de sécurité manuelle (coûteuse à mettre à l'échelle pour chaque merge request) ou des tests de pénétration et des programmes de bug bounty, qui interviennent trop tard. Il en résulte un écart croissant entre le rythme de développement et la rapidité avec laquelle l'expertise en sécurité peut être mise à profit.",[719,756,758],{"id":757},"intégrer-une-évaluation-de-sécurité-à-chaque-merge-request","Intégrer une évaluation de sécurité à chaque merge request",[712,760,761],{},"Le flow Security Review, disponible par défaut sur GitLab Duo Agent Platform, comble cet écart en analysant la finalité de votre code. Il détecte précisément les catégories de failles décrites ci-dessus : Broken Object Level Authorization et Broken Function Level Authorization (faille d'autorisation donnant à un utilisateur un accès à des fonctionnalités qui devraient lui être interdites), absence d'autorisation sur les opérations modifiant l'état, divulgation d'informations, attributions en masse, erreurs de logique métier et conditions de concurrence dans les workflows avec état.",[712,763,764],{},"Il complète les scanners traditionnels et l'analyse humaine sans les remplacer, et examine le code au moment même où une modification est apportée, lorsque la correction est la moins coûteuse. L'équipe de sécurité applicative de GitLab a utilisé le flow Security Review sur l'ensemble de ses merge requests internes tout au long de son développement.",[712,766,767],{},[729,768,769],{},"Découvrez le flow Security Review en action :",[771,772],"iframe",{"src":773,"frameBorder":774,"allow":775,"referrerPolicy":776,"style":777,"title":778},"https://player.vimeo.com/video/1209923383?badge=0&autopause=0&player_id=0&app_id=58479","0","autoplay; fullscreen; picture-in-picture; clipboard-write; encrypted-media; web-share","strict-origin-when-cross-origin","position:absolute;top:0;left:0;width:100%;height:100%;","19.2 Security Review Flow",[780,781],"script",{"src":782},"https://player.vimeo.com/api/player.js",[719,784,786],{"id":785},"fonctionnement","Fonctionnement",[712,788,789,790,794],{},"Lorsque votre merge request est prête, demandez une revue à ",[791,792,793],"code",{},"Duo Security Review",", comme vous le feriez auprès d'une personne. Le flow Security Review analyse le diff en contexte : les fichiers d'origine, les lignes modifiées, la discussion de la merge request et le code associé. Son raisonnement est optimisé pour la précision, et une passe de validation indépendante examine chaque résultat afin de filtrer les faux positifs probables.",[712,796,797],{},"Les résultats apparaissent sous forme de fils de discussion sur les lignes concernées, accompagnés d'un résumé dans une note interne. Sur les projets publics, ils sont limités à la note interne afin que les détails de sécurité ne soient pas exposés.",[712,799,800],{},"Chaque résultat est accompagné du contexte dont les relecteurs ont besoin :",[802,803,804,811,817,823,829],"ul",{},[805,806,807,810],"li",{},[729,808,809],{},"Type de vulnérabilité",", avec une référence CWE",[805,812,813,816],{},[729,814,815],{},"Sévérité"," : critique, élevée, modérée ou faible",[805,818,819,822],{},[729,820,821],{},"Niveau"," : Niveau 1 (Exploitable), Niveau 2 (Faille logique) ou Niveau 3 (Problème de conception)",[805,824,825,828],{},[729,826,827],{},"Une explication en langage clair"," du problème",[805,830,831,834],{},[729,832,833],{},"Une correction suggérée",", lorsqu'elle est disponible",[712,836,837,838,842,843,846],{},"La sévérité détermine l'état du relecteur : un résultat critique ou élevé définit l'état sur ",[839,840,841],"em",{},"Demander des modifications",", tandis que les résultats modérés ou faibles donnent lieu à un ",[839,844,845],{},"Commentaire",". Le flow n'approuve jamais, même lorsqu'il ne trouve rien, la décision finale revient toujours à un humain.",[712,848,849],{},"À partir de là, mentionnez le compte de service GitLab Duo Security Review de votre organisation dans un fil de discussion pour poser une question, discuter d'une correction ou contester un résultat. Résolvez chaque résultat en appliquant la correction sous forme de suggestion de merge request standard, en le rejetant comme faux positif ou en acceptant le risque. Après avoir effectué un commit de vos corrections, demandez une nouvelle revue pour vérifier ce qui a changé.",[719,851,853],{"id":852},"lancez-votre-premier-flow-security-review","Lancez votre premier flow Security Review",[712,855,856],{},"Le flow Security Review est en version bêta publique pour les clients GitLab Ultimate. Il est disponible sur GitLab.com, GitLab Self-Managed et GitLab Dedicated.",[712,858,859,860,865],{},"Découvrez comment démarrer en consultant notre ",[734,861,864],{"href":862,"rel":863},"https://docs.gitlab.com/ee/user/duo_agent_platform/flows/foundational_flows/security_review/",[],"documentation dédiée au flow Security Review",".",[712,867,868,869,874,875,880,881,865],{},"Vous pouvez accéder au flow Security Review grâce à un ",[734,870,873],{"href":871,"rel":872},"https://gitlab.com/-/trials/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/gitlab-duo-agent-platform/",[],"essai gratuit de GitLab Duo Agent Platform",". Vous êtes déjà abonné à GitLab Ultimate ? ",[734,876,879],{"href":877,"rel":878},"https://docs.gitlab.com/user/duo_agent_platform/turn_on_off/",[],"Activez GitLab Duo Agent Platform"," et utilisez les ",[734,882,885],{"href":883,"rel":884},"https://docs.gitlab.com/subscriptions/gitlab_credits/#included-credits",[],"GitLab Credits inclus dans votre abonnement",[712,887,888],{},"Le coût varie en fonction de la complexité du diff et du modèle sélectionné ; testez-le sur quelques merge requests avant de le déployer à grande échelle. La tarification pourra être mise à jour lors de la disponibilité générale.",[712,890,891,892,897],{},"Partagez vos retours dans notre ",[734,893,896],{"href":894,"rel":895},"https://gitlab.com/gitlab-org/gitlab/-/work_items/600304",[],"ticket dédié à cette fonctionnalité",", afin que vos contributions orientent nos développements.",{"title":899,"searchDepth":900,"depth":900,"links":901},"",2,[902,903,904,905],{"id":721,"depth":900,"text":722},{"id":757,"depth":900,"text":758},{"id":785,"depth":900,"text":786},{"id":852,"depth":900,"text":853},"2026-07-17","Utilisez le raisonnement de sécurité piloté par l'IA pour détecter les failles d'autorisation, les erreurs de logique métier et les conditions de concurrence pendant la revue de code.","md","https://res.cloudinary.com/about-gitlab-com/image/upload/v1783980535/t3gez0gpayfndrhncunf.png",{},"/fr-fr/blog/gitlab-duo-security-review-flow",{"title":913,"description":914,"config":915},"Le flow GitLab Duo Security Review détecte les failles logiques","Utilisez le raisonnement de sécurité piloté par l'IA pour détecter les lacunes d'autorisation, les erreurs de logique métier et les conditions de concurrence.",{"noIndex":10},"gitlab-duo-security-review-flow","fr-fr/blog/gitlab-duo-security-review-flow",[9,919,920,921],"AI","features","product","BlogPost","jANKOiRe9hpzhMWW3jIZoyNyfw7u-5tZcGkN90wyONE",[925,932,939,946,953,960,967,973,980],{"title":926,"heroImage":927,"category":9,"description":928,"authors":929,"slug":931,"externalUrl":6},"Sécurité de la chaîne d'approvisionnement : quels enjeux ?","https://res.cloudinary.com/about-gitlab-com/image/upload/v1750097701/Blog/Hero%20Images/Blog/Hero%20Images/blog-image-template-1800x945%20%285%29_1iy516k40hwBDChKcUJ2zb_1750097700983.png","La partie 1 de cette nouvelle série présente les défis inhérents au développement logiciel, les solutions pratiques et les tendances émergentes  comme l'IA.",[930],"Itzik Gan Baruch","software-supply-chain-security-guide-why-organizations-struggle",{"title":933,"heroImage":934,"category":9,"description":935,"authors":936,"slug":938,"externalUrl":6},"Réconcilier visibilité et sécurité dans la chaîne logicielle","https://res.cloudinary.com/about-gitlab-com/image/upload/f_auto,q_auto,c_lfill/v1749661926/Blog/Hero%20Images/security-patch-blog-image-r2-0506-700x400-fy25_2x.jpg","Découvrez comment tirer parti de GitLab 18.2.0 pour une couverture d'analyse de sécurité complète alliée à une visualisation claire des dépendances transitives.",[937],"Salman Ladha","bridging-the-visibility-gap-in-software-supply-chain-security",{"title":940,"heroImage":941,"category":9,"description":942,"authors":943,"slug":945,"externalUrl":6},"GitLab révèle une série d'attaques sur Bittensor via PyPI","https://res.cloudinary.com/about-gitlab-com/image/upload/f_auto,q_auto,c_lfill/f_auto,q_auto,c_lfill/v1750098739/Blog/Hero%20Images/Blog/Hero%20Images/AdobeStock_282096522_securitycompliance.jpeg_1750098739024.jpg","L'équipe de recherche dédiée aux vulnérabilités de GitLab a identifié une série d'attaques de typosquatting avec des paquets PyPI qui avaient pour objectif de voler de la cryptomonnaie dans des portefeuilles Bittensor en détournant des opérations de staking.",[944],"Michael Henriksen","gitlab-uncovers-bittensor-theft-campaign-via-pypi",{"title":947,"heroImage":948,"category":9,"description":949,"authors":950,"slug":952,"externalUrl":6},"Présentation des frameworks de conformité personnalisés dans GitLab","https://res.cloudinary.com/about-gitlab-com/image/upload/f_auto,q_auto,c_lfill/v1750099268/Blog/Hero%20Images/Blog/Hero%20Images/GitLab_Blog_Header_v4_YBzFAgt2EAkqQfqxNFEgj_1750099267940.svg","Réduisez le suivi manuel, accélérez la préparation aux audits et appliquez les contrôles plus rapidement, directement depuis les workflows DevSecOps de GitLab.",[951,937],"Ian Khor","introducing-custom-compliance-frameworks-in-gitlab",{"title":954,"heroImage":955,"category":9,"description":956,"authors":957,"slug":959,"externalUrl":6},"Comment sécuriser et optimiser votre dépôt Maven dans GitLab","https://res.cloudinary.com/about-gitlab-com/image/upload/v1749666187/Blog/Hero%20Images/blog-image-template-1800x945__6_.png","Optimisez votre workflow DevSecOps en adoptant des bonnes pratiques, en maîtrisant des techniques avancées et en découvrant nos prochaines fonctionnalités.",[958],"Tim Rizzi","tutorial-secure-and-optimize-your-maven-repository-in-gitlab",{"title":961,"heroImage":962,"category":9,"description":963,"authors":964,"slug":966,"externalUrl":6},"Intégrez la conformité à vos workflows DevSecOps avec GitLab","https://res.cloudinary.com/about-gitlab-com/image/upload/v1750097104/Blog/Hero%20Images/Blog/Hero%20Images/blog-image-template-1800x945%20%284%29_3LZkiDjHLjhqEkvOvBsVKp_1750097104092.png","Découvrez comment les frameworks de conformité personnalisés de GitLab transforment vos exigences réglementaires en composants intégrés et automatisés dans vos workflows.",[965],"Fernando Diaz","how-to-use-gitlabs-custom-compliance-frameworks-in-your-devsecops",{"title":968,"heroImage":969,"category":9,"description":970,"authors":971,"slug":972,"externalUrl":6},"GitLab + HackerOne : pour une sécurité applicative renforcée","https://res.cloudinary.com/about-gitlab-com/image/upload/v1750097503/Blog/Hero%20Images/Blog/Hero%20Images/blog-image-template-1800x945%20%2810%29_5ET24Q6i8ihqrAOkge7a1R_1750097503214.png","Découvrez le partenariat entre GitLab et HackerOne et comment cette intégration peut vous aider à renforcer la sécurité de vos applications.",[965],"enhance-application-security-with-gitlab-hackerone",{"title":974,"heroImage":975,"category":9,"description":976,"authors":977,"slug":979,"externalUrl":6},"Gestion des tokens sur GitLab : guide complet","https://res.cloudinary.com/about-gitlab-com/image/upload/v1750097408/Blog/Hero%20Images/Blog/Hero%20Images/AdobeStock_1097303277_6gTk7M1DNx0tFuovupVFB1_1750097407860.jpg","Découvrez le processus de gestion, d'identification et de sécurisation des tokens et renforcez votre sécurité tout au long du cycle de développement logiciel.",[978],"Hakeem Abdul-Razak","the-ultimate-guide-to-token-management-at-gitlab",{"title":981,"heroImage":982,"category":9,"description":983,"authors":984,"slug":985,"externalUrl":6},"Mise en conformité SOC 2 : GitLab vous simplifie la tâche","https://res.cloudinary.com/about-gitlab-com/image/upload/v1750099576/Blog/Hero%20Images/Blog/Hero%20Images/AdobeStock_1172300481_IGPi3TS4VzFgcqhvEdBlR_1750099575518.jpg","Découvrez les fonctionnalités de sécurité applicative de la plateforme DevSecOps de GitLab pour vous conformer aux exigences de la norme SOC 2.",[965],"guide-to-fulfilling-soc-2-security-requirements-with-gitlab",1786803788411]