[{"data":1,"prerenderedAt":981},["ShallowReactive",2],{"/fr-fr/blog/categories/security/page/5":3,"navigation-fr-fr":21,"banner-fr-fr":455,"footer-fr-fr":463,"security-category-page-total-items-fr-fr":702,"security-category-page-featured-fr-fr":703,"security-category-page-5-fr-fr":924},{"id":4,"title":5,"body":6,"category":6,"config":7,"content":11,"description":6,"extension":13,"meta":14,"navigation":15,"path":16,"seo":17,"slug":6,"stem":19,"testContent":6,"type":6,"__hash__":20},"blogCategories/fr-fr/blog/categories/security.yml","Security",null,{"template":8,"slug":9,"hide":10},"BlogCategory","security",false,{"name":12},"Sécurité","yml",{},true,"/fr-fr/blog/categories/security",{"title":12,"description":18},"Browse articles related to Sécurité on the GitLab Blog","fr-fr/blog/categories/security","w53e73P2QHMFJINqvUAC204SXUgtVy7XBivdu5WQyqo",{"logo":22,"freeTrial":27,"sales":32,"login":37,"items":42,"search":370,"minimal":406,"duo":425,"switchNav":434,"pricingDeployment":445},{"config":23},{"href":24,"dataGaName":25,"dataGaLocation":26},"/fr-fr/","gitlab logo","header",{"text":28,"config":29},"Commencer un essai gratuit",{"href":30,"dataGaName":31,"dataGaLocation":26},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/fr-fr&glm_content=default-saas-trial/","free trial",{"text":33,"config":34},"Demander une démo",{"href":35,"dataGaName":36,"dataGaLocation":26},"/fr-fr/sales/?contact-topic=request-demo","sales",{"text":38,"config":39},"Connexion",{"href":40,"dataGaName":41,"dataGaLocation":26},"https://gitlab.com/users/sign_in/","sign in",[43,72,173,178,292,348],{"text":44,"config":45,"menu":47},"Plateforme",{"dataNavLevelOne":46},"platform",{"type":48,"columns":49},"cards",[50,56,64],{"title":44,"description":51,"link":52},"La plateforme d'orchestration intelligente pour le DevSecOps",{"text":53,"config":54},"Explorer notre plateforme",{"href":55,"dataGaName":46,"dataGaLocation":26},"/fr-fr/platform/",{"title":57,"description":58,"link":59},"GitLab Duo Agent Platform","L'IA agentique pour l'ensemble du cycle de développement logiciel",{"text":60,"config":61},"Découvrir GitLab Duo",{"href":62,"dataGaName":63,"dataGaLocation":26},"/fr-fr/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":65,"description":66,"link":67},"Pourquoi GitLab ?","Découvrez les principales raisons pour lesquelles les entreprises choisissent GitLab",{"text":68,"config":69},"En savoir plus",{"href":70,"dataGaName":71,"dataGaLocation":26},"/fr-fr/why-gitlab/","why gitlab",{"text":73,"left":15,"config":74,"menu":76},"Produit",{"dataNavLevelOne":75},"solutions",{"type":77,"link":78,"columns":82,"feature":152},"lists",{"text":79,"config":80},"Voir toutes les solutions",{"href":81,"dataGaName":75,"dataGaLocation":26},"/fr-fr/solutions/",[83,108,130],{"title":84,"description":85,"link":86,"items":91},"Automatisation","CI/CD et automatisation pour accélérer le déploiement",{"config":87},{"icon":88,"href":89,"dataGaName":90,"dataGaLocation":26},"AutomatedCodeAlt","/fr-fr/solutions/delivery-automation/","automated software delivery",[92,96,99,104],{"text":93,"config":94},"CI/CD",{"href":95,"dataGaLocation":26,"dataGaName":93},"/fr-fr/solutions/continuous-integration/",{"text":57,"config":97},{"href":62,"dataGaLocation":26,"dataGaName":98},"gitlab duo agent platform - product menu",{"text":100,"config":101},"Gestion du code source",{"href":102,"dataGaLocation":26,"dataGaName":103},"/fr-fr/solutions/source-code-management/","Source Code Management",{"text":105,"config":106},"Livraison de logiciels automatisée",{"href":89,"dataGaLocation":26,"dataGaName":107},"Automated software delivery",{"title":12,"description":109,"link":110,"items":115},"Livrez du code plus rapidement sans compromettre la sécurité",{"config":111},{"href":112,"dataGaName":113,"dataGaLocation":26,"icon":114},"/fr-fr/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[116,120,125],{"text":117,"config":118},"Tests de sécurité des applications",{"href":112,"dataGaName":119,"dataGaLocation":26},"Application security testing",{"text":121,"config":122},"Sécurité de la chaîne d'approvisionnement logicielle",{"href":123,"dataGaLocation":26,"dataGaName":124},"/fr-fr/solutions/supply-chain/","Software supply chain security",{"text":126,"config":127},"Conformité logicielle",{"href":128,"dataGaName":129,"dataGaLocation":26},"/fr-fr/solutions/software-compliance/","software compliance",{"title":131,"link":132,"items":137},"Mesures",{"config":133},{"icon":134,"href":135,"dataGaName":136,"dataGaLocation":26},"DigitalTransformation","/fr-fr/solutions/visibility-measurement/","visibility and measurement",[138,142,147],{"text":139,"config":140},"Visibilité et mesures",{"href":135,"dataGaLocation":26,"dataGaName":141},"Visibility and Measurement",{"text":143,"config":144},"Gestion de la chaîne de valeur",{"href":145,"dataGaLocation":26,"dataGaName":146},"/fr-fr/solutions/value-stream-management/","Value Stream Management",{"text":148,"config":149},"Analyses et informations",{"href":150,"dataGaLocation":26,"dataGaName":151},"/fr-fr/solutions/analytics-and-insights/","Analytics and insights",{"title":153,"type":77,"items":154},"GitLab",[155,161,167],{"text":156,"config":157},"Entreprises",{"icon":158,"href":159,"dataGaLocation":26,"dataGaName":160},"Building","/fr-fr/enterprise/","enterprise",{"text":162,"config":163},"Pour les PME",{"icon":164,"href":165,"dataGaLocation":26,"dataGaName":166},"Work","/fr-fr/small-business/","small business",{"text":168,"config":169},"Pour le secteur public",{"icon":170,"href":171,"dataGaLocation":26,"dataGaName":172},"Organization","/fr-fr/solutions/public-sector/","public sector",{"text":174,"config":175},"Tarifs",{"href":176,"dataGaName":177,"dataGaLocation":26,"dataNavLevelOne":177},"/fr-fr/pricing/","pricing",{"text":179,"config":180,"menu":182},"Ressources",{"dataNavLevelOne":181},"resources",{"type":77,"link":183,"columns":187,"feature":281},{"text":184,"config":185},"Afficher toutes les ressources",{"href":186,"dataGaName":181,"dataGaLocation":26},"/fr-fr/resources/",[188,221,248],{"title":189,"items":190},"Premiers pas",[191,196,201,206,211,216],{"text":192,"config":193},"Installation",{"href":194,"dataGaName":195,"dataGaLocation":26},"/fr-fr/install/","install",{"text":197,"config":198},"Guides de démarrage",{"href":199,"dataGaName":200,"dataGaLocation":26},"/fr-fr/get-started/","quick setup checklists",{"text":202,"config":203},"Apprentissage",{"href":204,"dataGaLocation":26,"dataGaName":205},"https://university.gitlab.com/","learn",{"text":207,"config":208},"Documentation",{"href":209,"dataGaName":210,"dataGaLocation":26},"https://docs.gitlab.com/","product documentation",{"text":212,"config":213},"Vidéos sur les bonnes pratiques",{"href":214,"dataGaName":215,"dataGaLocation":26},"/fr-fr/getting-started-videos/","best practice videos",{"text":217,"config":218},"Intégrations",{"href":219,"dataGaName":220,"dataGaLocation":26},"/fr-fr/integrations/","integrations",{"title":222,"items":223},"Découvrir",[224,229,234,239,243],{"text":225,"config":226},"Témoignages clients",{"href":227,"dataGaName":228,"dataGaLocation":26},"/fr-fr/customers/","customer success stories",{"text":230,"config":231},"Blog",{"href":232,"dataGaName":233,"dataGaLocation":26},"/fr-fr/blog/","blog",{"text":235,"config":236},"Demo Hub",{"href":237,"dataGaName":238,"dataGaLocation":26},"/fr-fr/demo-hub/","demo hub",{"text":240,"config":241},"The Source",{"href":242,"dataGaName":233,"dataGaLocation":26},"/fr-fr/the-source/",{"text":244,"config":245},"Travail à distance",{"href":246,"dataGaName":247,"dataGaLocation":26},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":249,"items":250},"Connecter",[251,256,261,266,271,276],{"text":252,"config":253},"Services GitLab",{"href":254,"dataGaName":255,"dataGaLocation":26},"/fr-fr/services/","services",{"text":257,"config":258},"Contribuer",{"href":259,"dataGaName":260,"dataGaLocation":26},"https://contributors.gitlab.com","contribute",{"text":262,"config":263},"Communauté",{"href":264,"dataGaName":265,"dataGaLocation":26},"/community/","community",{"text":267,"config":268},"Forum",{"href":269,"dataGaName":270,"dataGaLocation":26},"https://forum.gitlab.com/","forum",{"text":272,"config":273},"Événements",{"href":274,"dataGaName":275,"dataGaLocation":26},"/events/","events",{"text":277,"config":278},"Partenaires",{"href":279,"dataGaName":280,"dataGaLocation":26},"/fr-fr/partners/","partners",{"config":282,"title":285,"text":286,"link":287},{"background":283,"textColor":284},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","Nouveautés de GitLab","Découvrez les dernières fonctionnalités et améliorations.",{"text":288,"config":289},"Lire les articles les plus récents",{"href":290,"dataGaName":291,"dataGaLocation":26},"/fr-fr/whats-new/","whats new",{"text":293,"config":294,"menu":296},"Société",{"dataNavLevelOne":295},"company",{"type":77,"columns":297},[298],{"items":299},[300,305,311,313,318,323,328,333,338,343],{"text":301,"config":302},"À propos",{"href":303,"dataGaName":304,"dataGaLocation":26},"/fr-fr/company/","about",{"text":306,"config":307,"footerGa":310},"Carrières",{"href":308,"dataGaName":309,"dataGaLocation":26},"/jobs/","jobs",{"dataGaName":309},{"text":272,"config":312},{"href":274,"dataGaName":275,"dataGaLocation":26},{"text":314,"config":315},"Leadership",{"href":316,"dataGaName":317,"dataGaLocation":26},"/company/team/e-group/","leadership",{"text":319,"config":320},"Manuel",{"href":321,"dataGaName":322,"dataGaLocation":26},"https://handbook.gitlab.com/","handbook",{"text":324,"config":325},"Relations avec les investisseurs",{"href":326,"dataGaName":327,"dataGaLocation":26},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":329,"config":330},"Trust Center",{"href":331,"dataGaName":332,"dataGaLocation":26},"/fr-fr/security/","trust center",{"text":334,"config":335},"Centre pour la transparence de l'IA",{"href":336,"dataGaName":337,"dataGaLocation":26},"/fr-fr/ai-transparency-center/","ai transparency center",{"text":339,"config":340},"Newsletter",{"href":341,"dataGaName":342,"dataGaLocation":26},"/company/contact/#contact-forms","newsletter",{"text":344,"config":345},"Presse",{"href":346,"dataGaName":347,"dataGaLocation":26},"/press/","press",{"text":349,"config":350,"menu":351},"Nous contacter",{"dataNavLevelOne":295},{"type":77,"columns":352},[353],{"items":354},[355,360,365],{"text":356,"config":357},"Contacter l'équipe commerciale",{"href":358,"dataGaName":359,"dataGaLocation":26},"/fr-fr/sales/","talk to sales",{"text":361,"config":362},"Assistance GitLab",{"href":363,"dataGaName":364,"dataGaLocation":26},"https://support.gitlab.com/hc/en-us","support portal",{"text":366,"config":367},"Portail clients GitLab",{"href":368,"dataGaName":369,"dataGaLocation":26},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":371,"login":372,"suggestions":379},"Fermer",{"text":373,"link":374},"Pour rechercher des dépôts et des projets, connectez-vous à",{"text":375,"config":376},"GitLab.com",{"href":40,"dataGaName":377,"dataGaLocation":378},"search login","search",{"text":380,"default":381},"Suggestions",[382,385,390,392,397,402],{"text":57,"config":383},{"href":62,"dataGaName":384,"dataGaLocation":378},"GitLab Duo Agent Platform",{"text":386,"config":387},"Suggestions de code (IA)",{"href":388,"dataGaName":389,"dataGaLocation":378},"/fr-fr/solutions/code-suggestions/","Code Suggestions (AI)",{"text":93,"config":391},{"href":95,"dataGaName":93,"dataGaLocation":378},{"text":393,"config":394},"GitLab sur AWS",{"href":395,"dataGaName":396,"dataGaLocation":378},"/fr-fr/partners/technology-partners/aws/","GitLab on AWS",{"text":398,"config":399},"GitLab sur Google Cloud",{"href":400,"dataGaName":401,"dataGaLocation":378},"/fr-fr/partners/technology-partners/google-cloud-platform/","GitLab on Google Cloud",{"text":403,"config":404},"Pourquoi utiliser GitLab ?",{"href":70,"dataGaName":405,"dataGaLocation":378},"Why GitLab?",{"freeTrial":407,"mobileIcon":412,"desktopIcon":417,"secondaryButton":420},{"text":408,"config":409},"Commencer votre essai gratuit",{"href":410,"dataGaName":31,"dataGaLocation":411},"https://gitlab.com/-/trials/new/","nav",{"altText":413,"config":414},"Icône GitLab",{"src":415,"dataGaName":416,"dataGaLocation":411},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":413,"config":418},{"src":419,"dataGaName":416,"dataGaLocation":411},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":421,"config":422},"Commencer",{"href":423,"dataGaName":424,"dataGaLocation":411},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/fr-fr/get-started/","get started",{"freeTrial":426,"mobileIcon":430,"desktopIcon":432},{"text":427,"config":428},"En savoir plus sur GitLab Duo",{"href":62,"dataGaName":429,"dataGaLocation":411},"gitlab duo",{"altText":413,"config":431},{"src":415,"dataGaName":416,"dataGaLocation":411},{"altText":413,"config":433},{"src":419,"dataGaName":416,"dataGaLocation":411},{"button":435,"mobileIcon":440,"desktopIcon":442},{"text":436,"config":437},"/switch",{"href":438,"dataGaName":439,"dataGaLocation":411},"#contact","switch",{"altText":413,"config":441},{"src":415,"dataGaName":416,"dataGaLocation":411},{"altText":413,"config":443},{"src":444,"dataGaName":416,"dataGaLocation":411},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":446,"mobileIcon":451,"desktopIcon":453},{"text":447,"config":448},"Retour aux tarifs",{"href":176,"dataGaName":449,"dataGaLocation":411,"icon":450},"back to pricing","GoBack",{"altText":413,"config":452},{"src":415,"dataGaName":416,"dataGaLocation":411},{"altText":413,"config":454},{"src":419,"dataGaName":416,"dataGaLocation":411},{"title":456,"button":457,"config":461},"GitLab Orbit est arrivé : la couche de contexte pour les agents d'IA.",{"text":68,"config":458},{"href":459,"dataGaName":460,"dataGaLocation":26},"/fr-fr/gitlab-orbit/","orbit",{"layout":462,"disabled":10},"release",{"data":464},{"text":465,"source":466,"edit":472,"contribute":477,"config":481,"items":486,"minimal":694},"Git est une marque déposée de Software Freedom Conservancy et notre utilisation de « GitLab » est sous licence.",{"text":467,"config":468},"Afficher le code source de la page",{"href":469,"dataGaName":470,"dataGaLocation":471},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":473,"config":474},"Modifier cette page",{"href":475,"dataGaName":476,"dataGaLocation":471},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":257,"config":478},{"href":479,"dataGaName":480,"dataGaLocation":471},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":482,"facebook":483,"youtube":484,"linkedin":485},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[487,533,586,629,661],{"title":174,"links":488,"subMenu":503},[489,493,498],{"text":490,"config":491},"Voir les forfaits",{"href":176,"dataGaName":492,"dataGaLocation":471},"view plans",{"text":494,"config":495},"GitLab Premium",{"href":496,"dataGaName":497,"dataGaLocation":471},"/fr-fr/pricing/premium/","why premium",{"text":499,"config":500},"GitLab Ultimate",{"href":501,"dataGaName":502,"dataGaLocation":471},"/fr-fr/pricing/ultimate/","why ultimate",[504],{"title":349,"links":505},[506,508,510,513,518,523,528],{"text":356,"config":507},{"href":358,"dataGaName":36,"dataGaLocation":471},{"text":361,"config":509},{"href":363,"dataGaName":364,"dataGaLocation":471},{"text":511,"config":512},"Portail clients",{"href":368,"dataGaName":369,"dataGaLocation":471},{"text":514,"config":515},"Statut",{"href":516,"dataGaName":517,"dataGaLocation":471},"https://status.gitlab.com/","status",{"text":519,"config":520},"Conditions d'utilisation",{"href":521,"dataGaName":522,"dataGaLocation":471},"/terms/","terms of use",{"text":524,"config":525},"Politique de confidentialité",{"href":526,"dataGaName":527,"dataGaLocation":471},"/fr-fr/privacy/","privacy statement",{"text":529,"config":530},"Gestion des cookies",{"dataGaName":531,"dataGaLocation":471,"id":532,"isOneTrustButton":15},"cookie preferences","ot-sdk-btn",{"title":73,"links":534,"subMenu":543},[535,539],{"text":536,"config":537},"Plateforme DevSecOps",{"href":55,"dataGaName":538,"dataGaLocation":471},"devsecops platform",{"text":540,"config":541},"Développement assisté par l'IA",{"href":62,"dataGaName":542,"dataGaLocation":471},"ai-assisted development",[544],{"title":545,"links":546},"Thèmes",[547,551,556,561,566,571,576,581],{"text":93,"config":548},{"href":549,"dataGaName":550,"dataGaLocation":471},"/fr-fr/topics/ci-cd/","cicd",{"text":552,"config":553},"GitOps",{"href":554,"dataGaName":555,"dataGaLocation":471},"/fr-fr/topics/gitops/","gitops",{"text":557,"config":558},"DevOps",{"href":559,"dataGaName":560,"dataGaLocation":471},"/fr-fr/topics/devops/","devops",{"text":562,"config":563},"Contrôle de version",{"href":564,"dataGaName":565,"dataGaLocation":471},"/fr-fr/topics/version-control/","version control",{"text":567,"config":568},"DevSecOps",{"href":569,"dataGaName":570,"dataGaLocation":471},"/fr-fr/topics/devsecops/","devsecops",{"text":572,"config":573},"Cloud-native",{"href":574,"dataGaName":575,"dataGaLocation":471},"/fr-fr/topics/cloud-native/","cloud native",{"text":577,"config":578},"IA pour la programmation",{"href":579,"dataGaName":580,"dataGaLocation":471},"/fr-fr/topics/devops/ai-for-coding/","ai for coding",{"text":582,"config":583},"IA agentique",{"href":584,"dataGaName":585,"dataGaLocation":471},"/fr-fr/topics/agentic-ai/","agentic ai",{"title":587,"links":588},"Solutions",[589,592,594,599,602,605,608,611,613,616,619,624],{"text":117,"config":590},{"href":112,"dataGaName":591,"dataGaLocation":471},"Application Security Testing",{"text":105,"config":593},{"href":89,"dataGaName":90,"dataGaLocation":471},{"text":595,"config":596},"Développement Agile",{"href":597,"dataGaName":598,"dataGaLocation":471},"/fr-fr/solutions/agile-delivery/","agile delivery",{"text":100,"config":600},{"href":102,"dataGaName":601,"dataGaLocation":471},"source code management",{"text":93,"config":603},{"href":95,"dataGaName":604,"dataGaLocation":471},"continuous integration & delivery",{"text":143,"config":606},{"href":145,"dataGaName":607,"dataGaLocation":471},"value stream management",{"text":552,"config":609},{"href":610,"dataGaName":555,"dataGaLocation":471},"/fr-fr/solutions/gitops/",{"text":156,"config":612},{"href":159,"dataGaName":160,"dataGaLocation":471},{"text":614,"config":615},"PME",{"href":165,"dataGaName":166,"dataGaLocation":471},{"text":617,"config":618},"Secteur public",{"href":171,"dataGaName":172,"dataGaLocation":471},{"text":620,"config":621},"Éducation",{"href":622,"dataGaName":623,"dataGaLocation":471},"/fr-fr/solutions/education/","education",{"text":625,"config":626},"Services financiers",{"href":627,"dataGaName":628,"dataGaLocation":471},"/fr-fr/solutions/finance/","financial services",{"title":179,"links":630},[631,633,635,637,640,642,645,647,649,651,653,655,657,659],{"text":192,"config":632},{"href":194,"dataGaName":195,"dataGaLocation":471},{"text":197,"config":634},{"href":199,"dataGaName":200,"dataGaLocation":471},{"text":202,"config":636},{"href":204,"dataGaName":205,"dataGaLocation":471},{"text":207,"config":638},{"href":209,"dataGaName":639,"dataGaLocation":471},"docs",{"text":230,"config":641},{"href":232,"dataGaName":233,"dataGaLocation":471},{"text":643,"config":644},"Nouveautés",{"href":290,"dataGaName":291,"dataGaLocation":471},{"text":225,"config":646},{"href":227,"dataGaName":228,"dataGaLocation":471},{"text":244,"config":648},{"href":246,"dataGaName":247,"dataGaLocation":471},{"text":252,"config":650},{"href":254,"dataGaName":255,"dataGaLocation":471},{"text":257,"config":652},{"href":259,"dataGaName":260,"dataGaLocation":471},{"text":262,"config":654},{"href":264,"dataGaName":265,"dataGaLocation":471},{"text":267,"config":656},{"href":269,"dataGaName":270,"dataGaLocation":471},{"text":272,"config":658},{"href":274,"dataGaName":275,"dataGaLocation":471},{"text":277,"config":660},{"href":279,"dataGaName":280,"dataGaLocation":471},{"title":293,"links":662},[663,665,667,669,671,673,678,683,685,687,689],{"text":301,"config":664},{"href":303,"dataGaName":295,"dataGaLocation":471},{"text":306,"config":666},{"href":308,"dataGaName":309,"dataGaLocation":471},{"text":314,"config":668},{"href":316,"dataGaName":317,"dataGaLocation":471},{"text":319,"config":670},{"href":321,"dataGaName":322,"dataGaLocation":471},{"text":324,"config":672},{"href":326,"dataGaName":327,"dataGaLocation":471},{"text":674,"config":675},"Développement durable",{"href":676,"dataGaName":677,"dataGaLocation":471},"/sustainability/","Sustainability",{"text":679,"config":680},"Diversité, inclusion et appartenance (DIB)",{"href":681,"dataGaName":682,"dataGaLocation":471},"/fr-fr/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":329,"config":684},{"href":331,"dataGaName":332,"dataGaLocation":471},{"text":339,"config":686},{"href":341,"dataGaName":342,"dataGaLocation":471},{"text":344,"config":688},{"href":346,"dataGaName":347,"dataGaLocation":471},{"text":690,"config":691},"Déclaration de transparence sur l'esclavage moderne",{"href":692,"dataGaName":693,"dataGaLocation":471},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":695},[696,698,700],{"text":519,"config":697},{"href":521,"dataGaName":522,"dataGaLocation":471},{"text":529,"config":699},{"dataGaName":531,"dataGaLocation":471,"id":532,"isOneTrustButton":15},{"text":524,"config":701},{"href":526,"dataGaName":527,"dataGaLocation":471},45,{"id":704,"title":705,"authors":706,"body":708,"category":9,"date":906,"description":907,"extension":908,"externalUrl":6,"faq":6,"featured":10,"heroImage":909,"meta":910,"navigation":15,"path":911,"seo":912,"slug":916,"stem":917,"tags":918,"template":922,"updatedDate":6,"__hash__":923},"blogPosts/fr-fr/blog/gitlab-duo-security-review-flow.md","Le flow GitLab Duo Security Review détecte les failles logiques que les scanners n'identifient pas",[707],"Mark Settle",{"type":709,"value":710,"toc":898},"minimark",[711,715,718,723,726,740,746,752,755,759,762,765,770,779,783,787,795,798,801,835,847,850,854,857,866,886,889],[712,713,714],"p",{},"Les scanners statiques excellent dans la détection des vulnérabilités qui correspondent à un modèle connu : entrées de requête non validées, secrets codés en dur, désérialisation non sécurisée. En revanche, ils peinent à détecter les failles dans la logique de votre application, où il n'existe aucun modèle à faire correspondre, seulement du code valide qui fonctionne de manière inappropriée pour votre domaine. Si elles ne sont pas détectées, ces failles apparaissent tardivement et sont plus coûteuses à corriger.",[712,716,717],{},"Le flow Security Review, désormais disponible en version bêta publique, examine les modifications de code comme le ferait un ingénieur en sécurité. Il analyse l'intention au lieu de comparer des signatures, afin de détecter les failles logiques avant qu'elles n'atteignent l'environnement de production. Il s'agit d'une avancée majeure pour identifier les failles dangereuses que les scanners manquent habituellement.",[719,720,722],"h2",{"id":721},"les-limites-des-scanners-basés-sur-des-modèles","Les limites des scanners basés sur des modèles",[712,724,725],{},"Les vulnérabilités applicatives les plus préjudiciables semblent souvent correctes ligne par ligne, mais enfreignent un contexte que le code ne contient pas, comme votre modèle d'autorisation, vos règles de sensibilité des données et vos workflows prévus. Voici trois des catégories de vulnérabilités les plus courantes :",[712,727,728,732,733,739],{},[729,730,731],"strong",{},"Accès et autorisation :"," la possibilité pour un utilisateur de lire ou de modifier une ressource est définie par votre modèle d'autorisation, et non par une construction du langage. La Broken Object Level Authorization (faille d'autorisation donnant accès aux données d'un autre utilisateur en modifiant un identifiant) figure en tête du classement ",[734,735,738],"a",{"href":736,"rel":737},"https://owasp.org/API-Security/editions/2023/fr/0x11-t10/",[],"OWASP API Security Top 10"," depuis 2019.",[712,741,742,745],{},[729,743,744],{},"Exposition des données :"," sérialiser un objet et le renvoyer est un code courant, d'apparence correcte. La question de savoir s'il divulgue des informations dépend des champs sensibles et de leurs destinataires, des éléments propres à votre domaine, et non à votre syntaxe.",[712,747,748,751],{},[729,749,750],{},"Flux de contrôle et workflow :"," les failles de logique métier et les conditions de concurrence surviennent lorsque des opérations valides s'exécutent dans le mauvais ordre, se répètent de façon inattendue ou sont manipulées. Exemples : processus de paiement contournable, état réactivé en raison d'une condition de concurrence ou paramètre modifié pour changer un prix.",[712,753,754],{},"Jusqu'à présent, la détection de ces failles nécessitait une revue de sécurité manuelle (coûteuse à mettre à l'échelle pour chaque merge request) ou des tests de pénétration et des programmes de bug bounty, qui interviennent trop tard. Il en résulte un écart croissant entre le rythme de développement et la rapidité avec laquelle l'expertise en sécurité peut être mise à profit.",[719,756,758],{"id":757},"intégrer-une-évaluation-de-sécurité-à-chaque-merge-request","Intégrer une évaluation de sécurité à chaque merge request",[712,760,761],{},"Le flow Security Review, disponible par défaut sur GitLab Duo Agent Platform, comble cet écart en analysant la finalité de votre code. Il détecte précisément les catégories de failles décrites ci-dessus : Broken Object Level Authorization et Broken Function Level Authorization (faille d'autorisation donnant à un utilisateur un accès à des fonctionnalités qui devraient lui être interdites), absence d'autorisation sur les opérations modifiant l'état, divulgation d'informations, attributions en masse, erreurs de logique métier et conditions de concurrence dans les workflows avec état.",[712,763,764],{},"Il complète les scanners traditionnels et l'analyse humaine sans les remplacer, et examine le code au moment même où une modification est apportée, lorsque la correction est la moins coûteuse. L'équipe de sécurité applicative de GitLab a utilisé le flow Security Review sur l'ensemble de ses merge requests internes tout au long de son développement.",[712,766,767],{},[729,768,769],{},"Découvrez le flow Security Review en action :",[771,772],"iframe",{"src":773,"frameBorder":774,"allow":775,"referrerPolicy":776,"style":777,"title":778},"https://player.vimeo.com/video/1209923383?badge=0&autopause=0&player_id=0&app_id=58479","0","autoplay; fullscreen; picture-in-picture; clipboard-write; encrypted-media; web-share","strict-origin-when-cross-origin","position:absolute;top:0;left:0;width:100%;height:100%;","19.2 Security Review Flow",[780,781],"script",{"src":782},"https://player.vimeo.com/api/player.js",[719,784,786],{"id":785},"fonctionnement","Fonctionnement",[712,788,789,790,794],{},"Lorsque votre merge request est prête, demandez une revue à ",[791,792,793],"code",{},"Duo Security Review",", comme vous le feriez auprès d'une personne. Le flow Security Review analyse le diff en contexte : les fichiers d'origine, les lignes modifiées, la discussion de la merge request et le code associé. Son raisonnement est optimisé pour la précision, et une passe de validation indépendante examine chaque résultat afin de filtrer les faux positifs probables.",[712,796,797],{},"Les résultats apparaissent sous forme de fils de discussion sur les lignes concernées, accompagnés d'un résumé dans une note interne. Sur les projets publics, ils sont limités à la note interne afin que les détails de sécurité ne soient pas exposés.",[712,799,800],{},"Chaque résultat est accompagné du contexte dont les relecteurs ont besoin :",[802,803,804,811,817,823,829],"ul",{},[805,806,807,810],"li",{},[729,808,809],{},"Type de vulnérabilité",", avec une référence CWE",[805,812,813,816],{},[729,814,815],{},"Sévérité"," : critique, élevée, modérée ou faible",[805,818,819,822],{},[729,820,821],{},"Niveau"," : Niveau 1 (Exploitable), Niveau 2 (Faille logique) ou Niveau 3 (Problème de conception)",[805,824,825,828],{},[729,826,827],{},"Une explication en langage clair"," du problème",[805,830,831,834],{},[729,832,833],{},"Une correction suggérée",", lorsqu'elle est disponible",[712,836,837,838,842,843,846],{},"La sévérité détermine l'état du relecteur : un résultat critique ou élevé définit l'état sur ",[839,840,841],"em",{},"Demander des modifications",", tandis que les résultats modérés ou faibles donnent lieu à un ",[839,844,845],{},"Commentaire",". Le flow n'approuve jamais, même lorsqu'il ne trouve rien, la décision finale revient toujours à un humain.",[712,848,849],{},"À partir de là, mentionnez le compte de service GitLab Duo Security Review de votre organisation dans un fil de discussion pour poser une question, discuter d'une correction ou contester un résultat. Résolvez chaque résultat en appliquant la correction sous forme de suggestion de merge request standard, en le rejetant comme faux positif ou en acceptant le risque. Après avoir effectué un commit de vos corrections, demandez une nouvelle revue pour vérifier ce qui a changé.",[719,851,853],{"id":852},"lancez-votre-premier-flow-security-review","Lancez votre premier flow Security Review",[712,855,856],{},"Le flow Security Review est en version bêta publique pour les clients GitLab Ultimate. Il est disponible sur GitLab.com, GitLab Self-Managed et GitLab Dedicated.",[712,858,859,860,865],{},"Découvrez comment démarrer en consultant notre ",[734,861,864],{"href":862,"rel":863},"https://docs.gitlab.com/ee/user/duo_agent_platform/flows/foundational_flows/security_review/",[],"documentation dédiée au flow Security Review",".",[712,867,868,869,874,875,880,881,865],{},"Vous pouvez accéder au flow Security Review grâce à un ",[734,870,873],{"href":871,"rel":872},"https://gitlab.com/-/trials/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/gitlab-duo-agent-platform/",[],"essai gratuit de GitLab Duo Agent Platform",". Vous êtes déjà abonné à GitLab Ultimate ? ",[734,876,879],{"href":877,"rel":878},"https://docs.gitlab.com/user/duo_agent_platform/turn_on_off/",[],"Activez GitLab Duo Agent Platform"," et utilisez les ",[734,882,885],{"href":883,"rel":884},"https://docs.gitlab.com/subscriptions/gitlab_credits/#included-credits",[],"GitLab Credits inclus dans votre abonnement",[712,887,888],{},"Le coût varie en fonction de la complexité du diff et du modèle sélectionné ; testez-le sur quelques merge requests avant de le déployer à grande échelle. La tarification pourra être mise à jour lors de la disponibilité générale.",[712,890,891,892,897],{},"Partagez vos retours dans notre ",[734,893,896],{"href":894,"rel":895},"https://gitlab.com/gitlab-org/gitlab/-/work_items/600304",[],"ticket dédié à cette fonctionnalité",", afin que vos contributions orientent nos développements.",{"title":899,"searchDepth":900,"depth":900,"links":901},"",2,[902,903,904,905],{"id":721,"depth":900,"text":722},{"id":757,"depth":900,"text":758},{"id":785,"depth":900,"text":786},{"id":852,"depth":900,"text":853},"2026-07-17","Utilisez le raisonnement de sécurité piloté par l'IA pour détecter les failles d'autorisation, les erreurs de logique métier et les conditions de concurrence pendant la revue de code.","md","https://res.cloudinary.com/about-gitlab-com/image/upload/v1783980535/t3gez0gpayfndrhncunf.png",{},"/fr-fr/blog/gitlab-duo-security-review-flow",{"title":913,"description":914,"config":915},"Le flow GitLab Duo Security Review détecte les failles logiques","Utilisez le raisonnement de sécurité piloté par l'IA pour détecter les lacunes d'autorisation, les erreurs de logique métier et les conditions de concurrence.",{"noIndex":10},"gitlab-duo-security-review-flow","fr-fr/blog/gitlab-duo-security-review-flow",[9,919,920,921],"AI","features","product","BlogPost","jANKOiRe9hpzhMWW3jIZoyNyfw7u-5tZcGkN90wyONE",[925,933,940,948,955,961,967,974],{"title":926,"heroImage":927,"category":9,"description":928,"authors":929,"slug":932,"externalUrl":6},"Scans de sécurité : comment choisir la bonne approche","https://res.cloudinary.com/about-gitlab-com/image/upload/v1750097969/Blog/Hero%20Images/Blog/Hero%20Images/AdobeStock_282096522_securitycompliance.jpeg_1750097968823.jpg","Découvrez les principes de base, les configurations, ainsi que les avantages et les inconvénients des scans de sécurité.",[930,931],"Matt Genelin","Mathias Ewald","how-to-choose-the-right-security-scanning-approach",{"title":934,"heroImage":935,"category":9,"description":936,"authors":937,"slug":939,"externalUrl":6},"Comment se conformer aux exigences de la directive NIS2 avec GitLab ","https://res.cloudinary.com/about-gitlab-com/image/upload/v1749659437/Blog/Hero%20Images/AdobeStock_398929148.jpg","La directive NIS2 se concentre sur la résilience, la réponse aux incidents et la gestion des risques. Découvrez comment GitLab vous permet de répondre à ces exigences de conformité.",[938],"Joseph Longo","how-gitlab-helps-meet-nis2-requirements",{"title":941,"heroImage":942,"category":9,"description":943,"authors":944,"slug":947,"externalUrl":6},"Les fonctionnalités de séparation des tâches de GitLab pour le secteur financier","https://res.cloudinary.com/about-gitlab-com/image/upload/v1750097688/Blog/Hero%20Images/Blog/Hero%20Images/blog-image-template-1800x945%20%286%29_6vL96ttKF8zJLLqfPpvFs_1750097687913.png","Découvrez comment GitLab garantit un développement logiciel sécurisé et conforme aux exigences de séparation des tâches dans le secteur financier.",[945,946],"Cherry Han","Gavin Peltz","finserv-how-to-implement-gitlabs-separation-of-duties-features",{"title":949,"heroImage":950,"category":9,"description":951,"authors":952,"slug":954,"externalUrl":6},"Migrer de GitHub Advanced Security vers GitLab Ultimate : notre guide complet","https://res.cloudinary.com/about-gitlab-com/image/upload/v1749666187/Blog/Hero%20Images/blog-image-template-1800x945__6_.png","Découvrez les similitudes et les différences entre GitLab Ultimate et GitHub Advanced Security, puis suivez notre tutoriel détaillé pour migrer vers GitLab.",[953],"Fernando Diaz","migration-guide-github-advanced-security-to-gitlab-ultimate",{"title":956,"heroImage":957,"category":9,"description":958,"authors":959,"slug":960,"externalUrl":6},"Comment intégrer vos propres scanners de sécurité dans GitLab","https://res.cloudinary.com/about-gitlab-com/image/upload/v1750097082/Blog/Hero%20Images/Blog/Hero%20Images/securitycheck_securitycheck.png_1750097081856.png","Découvrez comment enrichir votre usage de la plateforme DevSecOps en ajoutant des scanners de sécurité personnalisés à vos workflows.",[953],"how-to-integrate-custom-security-scanners-into-gitlab",{"title":962,"heroImage":963,"category":9,"description":964,"authors":965,"slug":966,"externalUrl":6},"ISO 27001: comment GitLab vous assiste dans votre démarche de conformité ","https://res.cloudinary.com/about-gitlab-com/image/upload/v1749662877/Blog/Hero%20Images/security-cover-new.png","Les fonctionnalités de sécurité logicielle de GitLab peuvent vous aider à vous conformer à la norme ISO 27001.",[938],"how-gitlab-can-support-your-iso-compliance-journey",{"title":968,"heroImage":969,"category":9,"description":970,"authors":971,"slug":973,"externalUrl":6},"Qu’est-ce qu’une nomenclature logicielle (SBOM) et quel est son rôle ?","https://res.cloudinary.com/about-gitlab-com/image/upload/v1749664571/Blog/Hero%20Images/blog-image-template-1800x945__8_.png","Découvrez ce qu'est une nomenclature logicielle et pourquoi elle fait désormais partie intégrante du développement logiciel. Lisez notre guide complet.",[972],"Sandra Gittlen","the-ultimate-guide-to-sboms",{"title":975,"heroImage":976,"category":9,"description":977,"authors":978,"slug":980,"externalUrl":6},"Séparation des tâches et conformité avec GitLab : le guide","https://res.cloudinary.com/about-gitlab-com/image/upload/v1750098232/Blog/Hero%20Images/Blog/Hero%20Images/AdobeStock_479904468%20%281%29_4lmOEVlaXP0YC3hSFmOw6i_1750098232241.jpg","Maintenez la conformité sans compromettre la rapidité de développement grâce à votre plateforme DevSecOps.",[979,953],"Beatriz Barbosa","ensuring-compliance",1786803788449]