[{"data":1,"prerenderedAt":1984},["ShallowReactive",2],{"/fr-fr/blog/vulnerability-triage-made-simple-with-gitlab-security-analyst-agent":3,"navigation-fr-fr":1206,"banner-fr-fr":1640,"footer-fr-fr":1648,"blog-post-authors-fr-fr-Fernando Diaz":1886,"blog-related-posts-fr-fr-vulnerability-triage-made-simple-with-gitlab-security-analyst-agent":1901,"blog-promotions-fr-fr":1923,"next-steps-fr-fr":1975},{"id":4,"title":5,"authors":6,"body":8,"category":1186,"date":1187,"description":1188,"extension":1189,"externalUrl":1190,"faq":1190,"featured":1191,"heroImage":1192,"meta":1193,"navigation":290,"path":1194,"seo":1195,"slug":1198,"stem":1199,"tags":1200,"template":1204,"updatedDate":1190,"__hash__":1205},"blogPosts/fr-fr/blog/vulnerability-triage-made-simple-with-gitlab-security-analyst-agent.md","Classez les vulnérabilités avec l’agent Security Analyst",[7],"Fernando Diaz",{"type":9,"value":10,"toc":1160},"minimark",[11,15,38,43,46,49,84,87,91,107,112,115,211,215,223,235,332,336,345,360,514,520,535,539,542,546,553,570,577,581,584,601,605,608,647,650,656,662,668,675,681,690,694,697,701,704,742,746,749,766,770,779,787,793,796,816,822,828,831,835,838,842,848,854,857,863,866,910,913,919,926,929,935,941,947,953,959,965,969,972,977,985,990,996,1001,1007,1012,1018,1021,1025,1028,1033,1039,1045,1051,1055,1058,1084,1088,1091,1123,1127,1130,1133,1136,1156],[12,13,14],"p",{},"Les applications modernes présentent constamment des failles de sécurité. Les équipes de développement sont souvent confrontées à des centaines, voire des milliers de résultats provenant des scanners de sécurité, ce qui complique l'identification des vulnérabilités qui représentent les risques les plus importants et doivent être traitées en priorité. C'est là qu'un classement efficace des vulnérabilités devient essentiel.",[12,16,17,18,24,25,30,31,37],{},"Découvrez dans cet article comment les ",[19,20,23],"a",{"href":21,"rel":22},"https://docs.gitlab.com/user/application_security/",[],"fonctionnalités intégrées de scan de sécurité de GitLab"," combinées avec ",[19,26,29],{"href":27,"rel":28},"https://docs.gitlab.com/user/duo_agent_platform/agents/foundational_agents/security_analyst_agent/",[],"l'agent GitLab Duo Security Analyst"," peuvent transformer la ",[19,32,36],{"href":33,"rel":34,"title":35},"https://about.gitlab.com/fr-fr/blog/what-is-vulnerability-management/",[],"Qu'est-ce que la gestion des vulnérabilités ?","gestion des vulnérabilités"," d'un processus manuel chronophage en un workflow intelligent et efficace.",[39,40,42],"h2",{"id":41},"quest-ce-que-le-classement-des-vulnérabilités","Qu'est-ce que le classement des vulnérabilités ?",[12,44,45],{},"Le classement des vulnérabilités est le processus d'analyse, de priorisation et de traitement des problèmes de sécurité détectés dans vos applications. Toutes les vulnérabilités ne se valent pas : certaines représentent des risques critiques et nécessitent une attention immédiate, tandis que d'autres peuvent être des faux positifs ou constituent une menace minime dans votre contexte spécifique.",[12,47,48],{},"Le classement traditionnel comprend les éléments suivants :",[50,51,52,60,66,72,78],"ul",{},[53,54,55,59],"li",{},[56,57,58],"strong",{},"L'examen des résultats d'analyse"," provenant de plusieurs outils de sécurité",[53,61,62,65],{},[56,63,64],{},"L'évaluation de la gravité"," en fonction des scores CVSS et l'exploitabilité",[53,67,68,71],{},[56,69,70],{},"La compréhension du contexte",", par exemple si le code vulnérable est réellement accessible",[53,73,74,77],{},[56,75,76],{},"La priorisation de la remédiation"," en fonction de l'impact métier et du risque",[53,79,80,83],{},[56,81,82],{},"Le suivi de la résolution"," jusqu'au déploiement",[12,85,86],{},"Ce processus devient extrêmement fastidieux lorsqu’il s’agit de codes sources volumineux et de scans fréquents. C'est là que GitLab entre en jeu : la plateforme relève ces défis grâce à des scans de sécurité intégrés et une analyse alimentée par l'IA.",[39,88,90],{"id":89},"comment-ajouter-des-scanners-de-sécurité-intégrés-dans-gitlab","Comment ajouter des scanners de sécurité intégrés dans GitLab ?",[12,92,93,94,100,101,106],{},"GitLab fournit des scanners de sécurité qui s'intègrent de manière transparente dans vos ",[19,95,99],{"href":96,"rel":97,"title":98},"https://about.gitlab.com/fr-fr/topics/ci-cd/cicd-pipeline/",[],"Qu'est-ce qu'un pipeline CI/CD ?","pipelines CI/CD",". Ces scanners s'exécutent automatiquement pendant l'exécution du pipeline et alimentent le ",[19,102,105],{"href":103,"rel":104},"https://docs.gitlab.com/user/application_security/vulnerability_report/",[],"rapport de vulnérabilités"," de GitLab avec les résultats de la branche par défaut.",[108,109,111],"h3",{"id":110},"quels-sont-les-scanners-de-sécurité-disponibles","Quels sont les scanners de sécurité disponibles ?",[12,113,114],{},"GitLab propose les scanners suivants :",[50,116,117,127,137,154,164,174,191,201],{},[53,118,119,126],{},[56,120,121],{},[19,122,125],{"href":123,"rel":124},"https://docs.gitlab.com/user/application_security/sast/",[],"Tests statiques de sécurité des applications (SAST)"," : analysent le code source à la recherche de vulnérabilités",[53,128,129,136],{},[56,130,131],{},[19,132,135],{"href":133,"rel":134},"https://docs.gitlab.com/user/application_security/dependency_scanning/",[],"Analyse des dépendances"," : identifie les vulnérabilités dans les dépendances du projet",[53,138,139,146,147,153],{},[56,140,141],{},[19,142,145],{"href":143,"rel":144},"https://docs.gitlab.com/user/application_security/container_scanning/",[],"Analyse des conteneurs"," : analyse les images ",[19,148,152],{"href":149,"rel":150,"title":151},"https://about.gitlab.com/fr-fr/blog/what-is-docker-comprehensive-guide/",[],"Qu'est-ce que Docker ?","Docker"," à la recherche de vulnérabilités connues",[53,155,156,163],{},[56,157,158],{},[19,159,162],{"href":160,"rel":161},"https://docs.gitlab.com/user/application_security/dast/browser/",[],"Tests dynamiques de sécurité des applications (DAST)"," : testent les applications en cours d'exécution à la recherche de vulnérabilités",[53,165,166,173],{},[56,167,168],{},[19,169,172],{"href":170,"rel":171},"https://docs.gitlab.com/user/application_security/secret_detection/",[],"Détection des secrets"," : détecte les secrets et identifiants validés accidentellement",[53,175,176,183,184,190],{},[56,177,178],{},[19,179,182],{"href":180,"rel":181},"https://docs.gitlab.com/user/application_security/iac_scanning/",[],"Analyse de l'Infrastructure as Code (IaC)"," : analyse l'",[19,185,189],{"href":186,"rel":187,"title":188},"https://about.gitlab.com/fr-fr/topics/gitops/infrastructure-as-code/",[],"Qu'est-ce que l'Infrastructure as Code ?","Infrastructure as Code"," à la recherche de mauvaises configurations",[53,192,193,200],{},[56,194,195],{},[19,196,199],{"href":197,"rel":198},"https://docs.gitlab.com/user/application_security/api_security_testing/",[],"Tests de sécurité des API"," : testent les API Web pour détecter les bogues et les problèmes de sécurité potentiels",[53,202,203,210],{},[56,204,205],{},[19,206,209],{"href":207,"rel":208},"https://docs.gitlab.com/user/application_security/api_fuzzing/",[],"Test de l’API web par injection de données aléatoires"," : transmet des valeurs inattendues aux paramètres de fonctionnement des API pour provoquer des comportements et erreurs inattendus dans le backend",[108,212,214],{"id":213},"exemple-ajouter-des-scanners-sast-et-lanalyse-des-dépendances","Exemple : ajouter des scanners SAST et l'analyse des dépendances",[12,216,217,218,222],{},"Pour activer le scan de sécurité, ajoutez les scanners à votre fichier ",[219,220,221],"code",{},".gitlab-ci.yml",".",[12,224,225,226,229,230,222],{},"Dans cet exemple, nous incluons les templates SAST et analyse des dépendances qui exécutent automatiquement ces scanners lors de la phase de test. Chaque scanner peut être remplacé à l'aide de variables (qui diffèrent pour chaque scanner). Par exemple, la variable ",[219,227,228],{},"SAST_EXCLUDED_PATHS"," indique aux SAST d'ignorer les répertoires/fichiers fournis. Les jobs de sécurité peuvent être remplacés à l'aide de la ",[19,231,234],{"href":232,"rel":233},"https://docs.gitlab.com/ci/yaml/",[],"syntaxe des jobs GitLab",[236,237,242],"pre",{"className":238,"code":239,"language":240,"meta":241,"style":241},"language-yaml shiki shiki-themes github-light","include:\n  - template: Security/SAST.gitlab-ci.yml\n  - template: Security/Dependency-Scanning.gitlab-ci.yml\n\nstages:\n  - test\n\nvariables:\n  SAST_EXCLUDED_PATHS: \"spec/, test/, tests/, tmp/\"\n\n","yaml","",[219,243,244,257,273,285,292,300,308,313,321],{"__ignoreMap":241},[245,246,249,253],"span",{"class":247,"line":248},"line",1,[245,250,252],{"class":251},"shJU0","include",[245,254,256],{"class":255},"sgsFI",":\n",[245,258,260,263,266,269],{"class":247,"line":259},2,[245,261,262],{"class":255},"  - ",[245,264,265],{"class":251},"template",[245,267,268],{"class":255},": ",[245,270,272],{"class":271},"sYBdl","Security/SAST.gitlab-ci.yml\n",[245,274,276,278,280,282],{"class":247,"line":275},3,[245,277,262],{"class":255},[245,279,265],{"class":251},[245,281,268],{"class":255},[245,283,284],{"class":271},"Security/Dependency-Scanning.gitlab-ci.yml\n",[245,286,288],{"class":247,"line":287},4,[245,289,291],{"emptyLinePlaceholder":290},true,"\n",[245,293,295,298],{"class":247,"line":294},5,[245,296,297],{"class":251},"stages",[245,299,256],{"class":255},[245,301,303,305],{"class":247,"line":302},6,[245,304,262],{"class":255},[245,306,307],{"class":271},"test\n",[245,309,311],{"class":247,"line":310},7,[245,312,291],{"emptyLinePlaceholder":290},[245,314,316,319],{"class":247,"line":315},8,[245,317,318],{"class":251},"variables",[245,320,256],{"class":255},[245,322,324,327,329],{"class":247,"line":323},9,[245,325,326],{"class":251},"  SAST_EXCLUDED_PATHS",[245,328,268],{"class":255},[245,330,331],{"class":271},"\"spec/, test/, tests/, tmp/\"\n",[108,333,335],{"id":334},"exemple-ajouter-lanalyse-des-conteneurs","Exemple : ajouter l'analyse des conteneurs",[12,337,338,339,344],{},"GitLab fournit un ",[19,340,343],{"href":341,"rel":342},"https://docs.gitlab.com/user/packages/container_registry/",[],"registre de conteneurs"," intégré dans lequel vous pouvez stocker des images de conteneurs pour chaque projet GitLab. Pour analyser ces conteneurs à la recherche de vulnérabilités, activez l'analyse des conteneurs.",[12,346,347,348,351,352,355,356,359],{},"Dans cet exemple, un conteneur est compilé, puis un push est effectué dans le job ",[219,349,350],{},"build-container"," à l'étape ",[219,353,354],{},"build",". Le conteneur est ensuite analysé dans le même pipeline à l'étape ",[219,357,358],{},"test"," :",[236,361,363],{"className":238,"code":362,"language":240,"meta":241,"style":241},"include:\n  - template: Security/Container-Scanning.gitlab-ci.yml\n\nstages:\n  - build\n  - test\n\nbuild-container:\n  stage: build\n  variables:\n    IMAGE: $CI_REGISTRY_IMAGE/$CI_COMMIT_REF_SLUG:$CI_COMMIT_SHA\n  before_script:\n    - docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY\n  script:\n    - docker build -t $IMAGE .\n    - docker push $IMAGE\n\ncontainer_scanning:\n  variables:\n    CS_IMAGE: $CI_REGISTRY_IMAGE/$CI_COMMIT_REF_SLUG:$CI_COMMIT_SHA\n\n",[219,364,365,371,382,386,392,399,405,409,415,424,432,443,451,460,468,476,484,489,497,504],{"__ignoreMap":241},[245,366,367,369],{"class":247,"line":248},[245,368,252],{"class":251},[245,370,256],{"class":255},[245,372,373,375,377,379],{"class":247,"line":259},[245,374,262],{"class":255},[245,376,265],{"class":251},[245,378,268],{"class":255},[245,380,381],{"class":271},"Security/Container-Scanning.gitlab-ci.yml\n",[245,383,384],{"class":247,"line":275},[245,385,291],{"emptyLinePlaceholder":290},[245,387,388,390],{"class":247,"line":287},[245,389,297],{"class":251},[245,391,256],{"class":255},[245,393,394,396],{"class":247,"line":294},[245,395,262],{"class":255},[245,397,398],{"class":271},"build\n",[245,400,401,403],{"class":247,"line":302},[245,402,262],{"class":255},[245,404,307],{"class":271},[245,406,407],{"class":247,"line":310},[245,408,291],{"emptyLinePlaceholder":290},[245,410,411,413],{"class":247,"line":315},[245,412,350],{"class":251},[245,414,256],{"class":255},[245,416,417,420,422],{"class":247,"line":323},[245,418,419],{"class":251},"  stage",[245,421,268],{"class":255},[245,423,398],{"class":271},[245,425,427,430],{"class":247,"line":426},10,[245,428,429],{"class":251},"  variables",[245,431,256],{"class":255},[245,433,435,438,440],{"class":247,"line":434},11,[245,436,437],{"class":251},"    IMAGE",[245,439,268],{"class":255},[245,441,442],{"class":271},"$CI_REGISTRY_IMAGE/$CI_COMMIT_REF_SLUG:$CI_COMMIT_SHA\n",[245,444,446,449],{"class":247,"line":445},12,[245,447,448],{"class":251},"  before_script",[245,450,256],{"class":255},[245,452,454,457],{"class":247,"line":453},13,[245,455,456],{"class":255},"    - ",[245,458,459],{"class":271},"docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY\n",[245,461,463,466],{"class":247,"line":462},14,[245,464,465],{"class":251},"  script",[245,467,256],{"class":255},[245,469,471,473],{"class":247,"line":470},15,[245,472,456],{"class":255},[245,474,475],{"class":271},"docker build -t $IMAGE .\n",[245,477,479,481],{"class":247,"line":478},16,[245,480,456],{"class":255},[245,482,483],{"class":271},"docker push $IMAGE\n",[245,485,487],{"class":247,"line":486},17,[245,488,291],{"emptyLinePlaceholder":290},[245,490,492,495],{"class":247,"line":491},18,[245,493,494],{"class":251},"container_scanning",[245,496,256],{"class":255},[245,498,500,502],{"class":247,"line":499},19,[245,501,429],{"class":251},[245,503,256],{"class":255},[245,505,507,510,512],{"class":247,"line":506},20,[245,508,509],{"class":251},"    CS_IMAGE",[245,511,268],{"class":255},[245,513,442],{"class":271},[12,515,516,517,222],{},"Une fois configurés, ces scanners s'exécutent automatiquement dans votre pipeline et transmettent leurs résultats dans le ",[19,518,105],{"href":103,"rel":519},[],[12,521,522,525,526,531,532,534],{},[56,523,524],{},"Remarque :"," bien que cela ne soit pas abordé dans cet article, veuillez noter que dans les merge requests, les scanners affichent la diff entre les vulnérabilités d'une branche de fonctionnalité et celles de la branche cible. De plus, des ",[19,527,530],{"href":528,"rel":529},"https://docs.gitlab.com/user/application_security/policies/",[],"politiques de sécurité"," granulaires peuvent être créées pour empêcher le merge du code vulnérable (sans approbation) si des vulnérabilités sont détectées, ainsi que pour forcer l'exécution des scanners, indépendamment de la façon dont le fichier ",[219,533,221],{}," est défini.",[39,536,538],{"id":537},"classement-des-résultats-avec-le-rapport-de-vulnérabilités-et-gitlab-pages","Classement des résultats avec le rapport de vulnérabilités et GitLab Pages",[12,540,541],{},"Une fois les scanners exécutés, GitLab regroupe tous les résultats dans des vues centralisées pour faciliter le classement.",[108,543,545],{"id":544},"accès-au-rapport-de-vulnérabilités","Accès au rapport de vulnérabilités",[12,547,548,549,552],{},"Accédez à ",[56,550,551],{},"Sécurisation > Rapport de vulnérabilités"," dans votre projet ou groupe. Cette page affiche toutes les vulnérabilités découvertes avec les informations clés suivantes :",[50,554,555,558,561,564,567],{},[53,556,557],{},"Niveaux de gravité (critique, élevé, moyen, faible, info)",[53,559,560],{},"Statut (détecté, confirmé, rejeté, résolu)",[53,562,563],{},"Type de scanner ayant détecté la vulnérabilité",[53,565,566],{},"Fichiers et lignes de code concernés",[53,568,569],{},"Date de détection et informations sur le pipeline",[12,571,572],{},[573,574],"img",{"alt":575,"src":576},"Rapport de vulnérabilités","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072457/jsz5qcti9pse1myyzktd.png",[108,578,580],{"id":579},"filtrage-et-organisation-des-vulnérabilités","Filtrage et organisation des vulnérabilités",[12,582,583],{},"Le rapport de vulnérabilités fournit de puissantes options de filtrage :",[50,585,586,589,592,595,598],{},[53,587,588],{},"Filtrer par gravité, statut, scanner, identifiant et accessibilité",[53,590,591],{},"Regrouper par gravité, statut, scanner, Open Web Application Security Project Top 10 (OWASP)",[53,593,594],{},"Rechercher des vulnérabilités et expositions communes (CVE) ou des noms de vulnérabilités spécifiques",[53,596,597],{},"Trier par date de détection ou gravité",[53,599,600],{},"Afficher les tendances dans le temps avec le tableau de bord de sécurité",[108,602,604],{"id":603},"classement-manuel-du-workflow","Classement manuel du workflow",[12,606,607],{},"Le classement traditionnel dans GitLab implique :",[609,610,611,617,623,629,635,641],"ol",{},[53,612,613,616],{},[56,614,615],{},"L'examen de chaque vulnérabilité"," en cliquant sur la page de détails",[53,618,619,622],{},[56,620,621],{},"L'évaluation de la description"," et la compréhension de l'impact potentiel",[53,624,625,628],{},[56,626,627],{},"L'examen du code affecté"," via des liens intégrés",[53,630,631,634],{},[56,632,633],{},"La vérification des correctifs existants"," ou des correctifs dans les dépendances",[53,636,637,640],{},[56,638,639],{},"La définition du statut"," (confirmer, rejeter avec motif ou créer un ticket)",[53,642,643,646],{},[56,644,645],{},"L'attribution de la responsabilité"," pour la correction",[12,648,649],{},"Voici un exemple de données de vulnérabilité fournies pour permettre le classement, y compris le flux de code :",[12,651,652],{},[573,653],{"alt":654,"src":655},"Page de vulnérabilités 1","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072471/imy4qfc89ajoc42auqs3.png",[12,657,658],{},[573,659],{"alt":660,"src":661},"Page de vulnérabilités 2","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072473/g7dfge2acunebf9oa99g.png",[12,663,664],{},[573,665],{"alt":666,"src":667},"Flux de code de vulnérabilités","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072468/wr2i9ry5rgzwhimmo793.png",[12,669,670,671,674],{},"Sur la page des données relatives aux vulnérabilités, vous pouvez sélectionner ",[56,672,673],{},"Éditer la vulnérabilité"," pour modifier son statut et fournir un motif. Vous pouvez ensuite créer un ticket et l'attribuer pour la remédiation.",[12,676,677],{},[573,678],{"alt":679,"src":680},"Page de vulnérabilités – changement de statut","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072466/t0m8ewo82wbgo12d3vip.png",[12,682,683,684,689],{},"Bien que ce workflow soit complet, il nécessite une expertise en matière de sécurité et peut prendre beaucoup de temps lorsqu'il s'agit de traiter des centaines de résultats. C'est là que l'agent GitLab Duo Security Analyst, qui fait partie de ",[19,685,688],{"href":686,"rel":687},"https://about.gitlab.com/fr-fr/gitlab-duo-agent-platform/",[],"GitLab Duo Agent Platform",", devient indispensable.",[39,691,693],{"id":692},"agent-gitlab-duo-security-analyst-définition-et-configuration","Agent GitLab Duo Security Analyst : définition et configuration",[12,695,696],{},"L'agent GitLab Duo Security Analyst est un outil alimenté par l'IA qui automatise l'analyse et le classement des vulnérabilités. L'agent comprend le contexte de votre application, évalue intelligemment les risques et fournit des recommandations exploitables.",[108,698,700],{"id":699},"comment-fonctionne-lagent-gitlab-duo-security-analyst","Comment fonctionne l'agent GitLab Duo Security Analyst ?",[12,702,703],{},"L'agent analyse les vulnérabilités en :",[50,705,706,712,718,724,730,736],{},[53,707,708,711],{},[56,709,710],{},"Évaluant l'exploitabilité"," dans le contexte spécifique de votre code source",[53,713,714,717],{},[56,715,716],{},"Évaluant l'accessibilité"," pour déterminer si les chemins de code vulnérables sont réellement utilisés",[53,719,720,723],{},[56,721,722],{},"Priorisant en fonction du risque"," plutôt que de simples scores CVSS",[53,725,726,729],{},[56,727,728],{},"Expliquant les vulnérabilités"," dans un langage clair et exploitable",[53,731,732,735],{},[56,733,734],{},"Recommandant des mesures correctives"," spécifiques à votre application",[53,737,738,741],{},[56,739,740],{},"Réduisant les faux positifs"," grâce à une analyse contextuelle",[108,743,745],{"id":744},"prérequis","Prérequis",[12,747,748],{},"Pour utiliser l'agent Security Analyst, vous avez besoin des éléments suivants :",[50,750,751,760,763],{},[53,752,753,754,759],{},"Un abonnement ",[19,755,758],{"href":756,"rel":757,"title":758},"https://about.gitlab.com/fr-fr/pricing/ultimate/",[],"GitLab Ultimate"," avec GitLab Duo Agent Platform activé",[53,761,762],{},"Des scanners de sécurité configurés dans votre projet",[53,764,765],{},"Au moins une vulnérabilité dans votre rapport de vulnérabilités",[108,767,769],{"id":768},"activation-de-lagent-security-analyst","Activation de l'agent Security Analyst",[12,771,772,773,778],{},"L'agent Security Analyst est un ",[19,774,777],{"href":775,"rel":776},"https://docs.gitlab.com/user/duo_agent_platform/agents/foundational_agents/",[],"agent par défaut",". Contrairement à l'agent GitLab Duo, les agents par défaut comprennent les workflows, frameworks et bonnes pratiques propres à leurs domaines spécialisés. Les agents par défaut sont accessibles directement depuis votre projet sans configuration supplémentaire.",[12,780,781,782,359],{},"Vous pouvez trouver l'agent Security Analyst dans le ",[19,783,786],{"href":784,"rel":785},"https://docs.gitlab.com/user/duo_agent_platform/ai_catalog/",[],"catalogue d'IA",[12,788,789],{},[573,790],{"alt":791,"src":792},"Catalogue d'IA de GitLab","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072458/nv1qwisln1hxbgzeva7a.png",[12,794,795],{},"Pour approfondir et voir les détails de l'agent, tels que son invite système et ses outils :",[609,797,798,803,810],{},[53,799,548,800,222],{},[56,801,802],{},"gitlab.com/explore/",[53,804,805,806,809],{},"Sélectionnez ",[56,807,808],{},"Catalogue d'IA"," dans l'onglet latéral.",[53,811,805,812,815],{},[56,813,814],{},"Security Analyst Agent"," dans la liste.",[12,817,818],{},[573,819],{"alt":820,"src":821},"Détails de l'agent GitLab Duo Security Analyst 1","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072470/wjbwpgy6ipbblderxfdb.png",[12,823,824],{},[573,825],{"alt":826,"src":827},"Détails de l'agent GitLab Duo Security Analyst 2","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072469/dzhbqxt2cmwwvxeaqxfe.png",[12,829,830],{},"L'agent s’intègre directement à votre workflow existant et ne requiert aucune configuration supplémentaire au-delà des prérequis définis.",[39,832,834],{"id":833},"identification-des-vulnérabilités-critiques-avec-lagent-security-analyst","Identification des vulnérabilités critiques avec l'agent Security Analyst",[12,836,837],{},"Voyons maintenant comment tirer parti de l'agent Security Analyst pour identifier et prioriser rapidement les vulnérabilités les plus importantes.",[108,839,841],{"id":840},"analyse","Analyse",[12,843,844,845,222],{},"Pour démarrer une analyse, accédez à votre projet GitLab (assurez-vous qu'il répond aux prérequis). Vous pouvez ensuite ouvrir GitLab Duo Chat et sélectionner ",[56,846,847],{},"Security Analyst",[12,849,850],{},[573,851],{"alt":852,"src":853},"Sélection de l'agent GitLab Duo Security Analyst","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072464/rrdk9aidkck2oeddtjm0.png",[12,855,856],{},"Dans le chat, sélectionnez le modèle à utiliser avec l'agent et assurez-vous d'activer le mode agentique.",[12,858,859],{},[573,860],{"alt":861,"src":862},"Agent GitLab Duo Security Analyst – sélection du modèle","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072458/hvccofv3nadkpkzfevx0.png",[12,864,865],{},"Un chat s'ouvrira où vous pourrez interagir avec l'agent GitLab Duo Security Analyst en utilisant l'interface conversationnelle de l'agent. Cet agent peut effectuer les actions suivantes :",[50,867,868,874,880,886,892,898,904],{},[53,869,870,873],{},[56,871,872],{},"Classement des vulnérabilités"," : analyser et prioriser les résultats de sécurité sur différents types de scan.",[53,875,876,879],{},[56,877,878],{},"Évaluation des risques"," : évaluer la gravité, l'exploitabilité et l'impact métier des vulnérabilités.",[53,881,882,885],{},[56,883,884],{},"Identification des faux positifs"," : distinguer les menaces réelles des résultats sans danger.",[53,887,888,891],{},[56,889,890],{},"Gestion de la conformité"," : comprendre les exigences réglementaires et les délais de correction.",[53,893,894,897],{},[56,895,896],{},"Rapports de sécurité"," : générer des résumés de la posture de sécurité et des progrès de remédiation.",[53,899,900,903],{},[56,901,902],{},"Planification des corrections"," : créer des plans d'action pour traiter les vulnérabilités.",[53,905,906,909],{},[56,907,908],{},"Automatisation du workflow de sécurité"," : rationaliser les tâches répétitives d'évaluation de la sécurité.",[12,911,912],{},"De plus, voici les outils dont dispose l'agent Security Analyst :",[12,914,915],{},[573,916],{"alt":917,"src":918},"Agent GitLab Duo Security Analyst – outils","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072470/bgg2icxb0hp5g0zmerj3.png",[12,920,921,922,925],{},"Par exemple, il est possible de demander « ",[56,923,924],{},"Quelles sont les vulnérabilités les plus critiques et lesquelles dois-je traiter en priorité ?"," » pour déterminer facilement ce qui est important.",[12,927,928],{},"L'agent répondra comme suit :",[12,930,931],{},[573,932],{"alt":933,"src":934},"Agent GitLab Duo Security Analyst 1","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072476/hic8szspoobbmntxw5js.png",[12,936,937],{},[573,938],{"alt":939,"src":940},"Agent GitLab Duo Security Analyst 2","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072463/iytr116dfkno3akr2xgf.png",[12,942,943],{},[573,944],{"alt":945,"src":946},"Agent GitLab Duo Security Analyst 3","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072464/gzmggi6xu1bzobqdyxhg.png",[12,948,949],{},[573,950],{"alt":951,"src":952},"Agent GitLab Duo Security Analyst 4","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072457/gv7ncdauqw8eszaxdcpf.png",[12,954,955],{},[573,956],{"alt":957,"src":958},"Agent GitLab Duo Security Analyst 5","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072457/ifj4xp8kfv9ranfwav3h.png",[12,960,961],{},[573,962],{"alt":963,"src":964},"Agent GitLab Duo Security Analyst 6","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072457/arr8jfqn52zy1q72jqh5.png",[108,966,968],{"id":967},"exemples-de-requêtes-pour-un-classement-efficace","Exemples de requêtes pour un classement efficace",[12,970,971],{},"Voici des requêtes efficaces à utiliser avec l'agent Security Analyst :",[12,973,974],{},[56,975,976],{},"Identifier les problèmes critiques :",[236,978,983],{"className":979,"code":981,"language":982,"meta":241},[980],"language-text","« Montre-moi les vulnérabilités qui sont activement exploitables dans notre code de production »\n","text",[219,984,981],{"__ignoreMap":241},[12,986,987],{},[56,988,989],{},"Se concentrer sur les vulnérabilités accessibles :",[236,991,994],{"className":992,"code":993,"language":982,"meta":241},[980],"« Quelles sont les vulnérabilités de gravité élevée qui se trouvent dans les chemins de code qui sont réellement exécutés ? »\n",[219,995,993],{"__ignoreMap":241},[12,997,998],{},[56,999,1000],{},"Comprendre les dépendances :",[236,1002,1005],{"className":1003,"code":1004,"language":982,"meta":241},[980],"« Quelles sont les vulnérabilités de dépendances les plus critiques et des correctifs sont-ils disponibles ? »\n",[219,1006,1004],{"__ignoreMap":241},[12,1008,1009],{},[56,1010,1011],{},"Obtenir des conseils de remédiation :",[236,1013,1016],{"className":1014,"code":1015,"language":982,"meta":241},[980],"« Explique-moi comment corriger la vulnérabilité d'injection SQL dans l'authentification utilisateur »\n",[219,1017,1015],{"__ignoreMap":241},[12,1019,1020],{},"Vous pouvez également attribuer directement les vulnérabilités aux équipes de développement.",[108,1022,1024],{"id":1023},"les-recommandations-de-lagent","Les recommandations de l'agent",[12,1026,1027],{},"Lorsque l'agent Security Analyst analyse les vulnérabilités, il fournit les éléments suivants :",[12,1029,1030,1032],{},[56,1031,878],{}," : l'agent explique pourquoi une vulnérabilité est critique au-delà du simple score CVSS et tient compte de l'architecture et des modèles d'utilisation spécifiques de votre application.",[12,1034,1035,1038],{},[56,1036,1037],{},"Analyse d'exploitabilité"," : il détermine si le code vulnérable est réellement accessible et exploitable dans votre environnement, ce qui aide à filtrer les risques théoriques.",[12,1040,1041,1044],{},[56,1042,1043],{},"Mesures correctives"," : l'agent fournit des conseils spécifiques et concrets sur la façon de corriger les vulnérabilités, y compris des exemples de code le cas échéant.",[12,1046,1047,1050],{},[56,1048,1049],{},"Classement par ordre de priorité"," : au lieu de vous submerger avec des centaines de résultats, l'agent vous aide à identifier les principaux problèmes qui doivent être traités en priorité.",[108,1052,1054],{"id":1053},"exemple-concret-de-workflow","Exemple concret de workflow",[12,1056,1057],{},"Voici à quoi pourrait ressembler une session de classement type :",[609,1059,1060,1066,1072,1078],{},[53,1061,1062,1065],{},[56,1063,1064],{},"Commencer par une vue d'ensemble"," : « Analyse la posture de sécurité de ce projet et met en évidence les 5 vulnérabilités les plus critiques. »",[53,1067,1068,1071],{},[56,1069,1070],{},"Entrer dans les détails"," : pour chaque vulnérabilité critique identifiée, posez la question suivante : « Cette vulnérabilité est-elle réellement exploitable dans notre application ? »",[53,1073,1074,1077],{},[56,1075,1076],{},"Planifier la remédiation"," : « Quel est le correctif recommandé pour ce problème d'injection SQL, et y a-t-il des conséquences à prendre en compte ? »",[53,1079,1080,1083],{},[56,1081,1082],{},"Suivre les progrès"," : après avoir traité les problèmes critiques, posez la question suivante : « Quelles vulnérabilités dois-je prioriser ensuite ? »",[108,1085,1087],{"id":1086},"avantages-du-classement-assisté-par-agent","Avantages du classement assisté par agent",[12,1089,1090],{},"L'utilisation de l'agent Security Analyst transforme la gestion des vulnérabilités :",[50,1092,1093,1099,1105,1111,1117],{},[53,1094,1095,1098],{},[56,1096,1097],{},"Gain de temps"," : réduisez les heures d'analyse manuelle à quelques minutes d'examen guidé",[53,1100,1101,1104],{},[56,1102,1103],{},"Meilleure priorisation"," : concentrez-vous sur les vulnérabilités qui présentent réellement un risque pour votre application",[53,1106,1107,1110],{},[56,1108,1109],{},"Transfert de connaissances"," : apprenez les bonnes pratiques de sécurité grâce aux explications de l'agent",[53,1112,1113,1116],{},[56,1114,1115],{},"Normes cohérentes"," : appliquez une logique de classement cohérente à tous les projets",[53,1118,1119,1122],{},[56,1120,1121],{},"Réduction de la fatigue liée aux alertes"," : filtrez efficacement le bruit et les faux positifs",[39,1124,1126],{"id":1125},"lancez-vous-dès-aujourdhui","Lancez-vous dès aujourd'hui",[12,1128,1129],{},"Le classement des vulnérabilités ne doit pas forcément être un processus manuel et fastidieux. En combinant les scanners de sécurité intégrés de GitLab avec l'agent GitLab Duo Security Analyst, les équipes de développement peuvent rapidement identifier et prioriser les vulnérabilités qui comptent vraiment.",[12,1131,1132],{},"La capacité de l'agent à comprendre le contexte, à évaluer le risque réel et fournir des conseils pratiques transforme l'analyse de sécurité d'une simple case à cocher en matière de conformité en une tâche pratique et efficace de votre workflow de développement. Au lieu de vous plonger dans des centaines de rapports de vulnérabilités, vous pouvez concentrer votre énergie sur la résolution des problèmes qui menacent réellement la sécurité de votre application.",[12,1134,1135],{},"Commencez par activer les scanners de sécurité dans vos pipelines GitLab, puis tirez parti de l'agent Security Analyst pour prendre des décisions intelligentes et éclairées concernant la correction des vulnérabilités.",[1137,1138,1139],"blockquote",{},[12,1140,1141,1144,1145,1150,1151,1155],{},[56,1142,1143],{},"Prêt à vous lancer ?"," Consultez la ",[19,1146,1149],{"href":1147,"rel":1148},"https://docs.gitlab.com/user/duo_agent_platform/",[],"documentation de GitLab Duo Agent Platform"," et la ",[19,1152,1154],{"href":21,"rel":1153},[],"documentation sur l'analyse de sécurité"," pour commencer à transformer votre workflow de gestion des vulnérabilités dès aujourd'hui.",[1157,1158,1159],"style",{},"html pre.shiki code .shJU0, html code.shiki .shJU0{--shiki-default:#22863A}html pre.shiki code .sgsFI, html code.shiki .sgsFI{--shiki-default:#24292E}html pre.shiki code .sYBdl, html code.shiki .sYBdl{--shiki-default:#032F62}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}",{"title":241,"searchDepth":259,"depth":259,"links":1161},[1162,1163,1168,1173,1178,1185],{"id":41,"depth":259,"text":42},{"id":89,"depth":259,"text":90,"children":1164},[1165,1166,1167],{"id":110,"depth":275,"text":111},{"id":213,"depth":275,"text":214},{"id":334,"depth":275,"text":335},{"id":537,"depth":259,"text":538,"children":1169},[1170,1171,1172],{"id":544,"depth":275,"text":545},{"id":579,"depth":275,"text":580},{"id":603,"depth":275,"text":604},{"id":692,"depth":259,"text":693,"children":1174},[1175,1176,1177],{"id":699,"depth":275,"text":700},{"id":744,"depth":275,"text":745},{"id":768,"depth":275,"text":769},{"id":833,"depth":259,"text":834,"children":1179},[1180,1181,1182,1183,1184],{"id":840,"depth":275,"text":841},{"id":967,"depth":275,"text":968},{"id":1023,"depth":275,"text":1024},{"id":1053,"depth":275,"text":1054},{"id":1086,"depth":275,"text":1087},{"id":1125,"depth":259,"text":1126},"security","2026-03-09","Découvrez comment GitLab Duo Agent Platform utilise l'IA pour prioriser les vulnérabilités, réduire la fatigue liée aux alertes et aider les équipes à se concentrer sur les risques de sécurité critiques.","md",null,false,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1756122536/akivvcnafog9c4dhhzkp.png",{},"/fr-fr/blog/vulnerability-triage-made-simple-with-gitlab-security-analyst-agent",{"config":1196,"title":5,"description":1197},{"noIndex":1191},"GitLab Duo Agent Platform utilise l'IA pour prioriser les vulnérabilités et aider les équipes à se concentrer sur les risques de sécurité critiques.","vulnerability-triage-made-simple-with-gitlab-security-analyst-agent","fr-fr/blog/vulnerability-triage-made-simple-with-gitlab-security-analyst-agent",[1201,1202,1203,1186],"AI","product","tutorial","BlogPost","_WDUUk7lEkiiHxGJJvIkJ4g_2sb6Hc-Da7irtvz5Lno",{"logo":1207,"freeTrial":1212,"sales":1217,"login":1222,"items":1227,"search":1556,"minimal":1591,"duo":1610,"switchNav":1619,"pricingDeployment":1630},{"config":1208},{"href":1209,"dataGaName":1210,"dataGaLocation":1211},"/fr-fr/","gitlab logo","header",{"text":1213,"config":1214},"Commencer un essai gratuit",{"href":1215,"dataGaName":1216,"dataGaLocation":1211},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/fr-fr&glm_content=default-saas-trial/","free trial",{"text":1218,"config":1219},"Demander une démo",{"href":1220,"dataGaName":1221,"dataGaLocation":1211},"/fr-fr/sales/?contact-topic=request-demo","sales",{"text":1223,"config":1224},"Connexion",{"href":1225,"dataGaName":1226,"dataGaLocation":1211},"https://gitlab.com/users/sign_in/","sign in",[1228,1257,1359,1364,1478,1534],{"text":1229,"config":1230,"menu":1232},"Plateforme",{"dataNavLevelOne":1231},"platform",{"type":1233,"columns":1234},"cards",[1235,1241,1249],{"title":1229,"description":1236,"link":1237},"La plateforme d'orchestration intelligente pour le DevSecOps",{"text":1238,"config":1239},"Explorer notre plateforme",{"href":1240,"dataGaName":1231,"dataGaLocation":1211},"/fr-fr/platform/",{"title":1242,"description":1243,"link":1244},"GitLab Duo Agent Platform","L'IA agentique pour l'ensemble du cycle de développement logiciel",{"text":1245,"config":1246},"Découvrir GitLab Duo",{"href":1247,"dataGaName":1248,"dataGaLocation":1211},"/fr-fr/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":1250,"description":1251,"link":1252},"Pourquoi GitLab ?","Découvrez les principales raisons pour lesquelles les entreprises choisissent GitLab",{"text":1253,"config":1254},"En savoir plus",{"href":1255,"dataGaName":1256,"dataGaLocation":1211},"/fr-fr/why-gitlab/","why gitlab",{"text":1258,"left":290,"config":1259,"menu":1261},"Produit",{"dataNavLevelOne":1260},"solutions",{"type":1262,"link":1263,"columns":1267,"feature":1338},"lists",{"text":1264,"config":1265},"Voir toutes les solutions",{"href":1266,"dataGaName":1260,"dataGaLocation":1211},"/fr-fr/solutions/",[1268,1293,1316],{"title":1269,"description":1270,"link":1271,"items":1276},"Automatisation","CI/CD et automatisation pour accélérer le déploiement",{"config":1272},{"icon":1273,"href":1274,"dataGaName":1275,"dataGaLocation":1211},"AutomatedCodeAlt","/fr-fr/solutions/delivery-automation/","automated software delivery",[1277,1281,1284,1289],{"text":1278,"config":1279},"CI/CD",{"href":1280,"dataGaLocation":1211,"dataGaName":1278},"/fr-fr/solutions/continuous-integration/",{"text":1242,"config":1282},{"href":1247,"dataGaLocation":1211,"dataGaName":1283},"gitlab duo agent platform - product menu",{"text":1285,"config":1286},"Gestion du code source",{"href":1287,"dataGaLocation":1211,"dataGaName":1288},"/fr-fr/solutions/source-code-management/","Source Code Management",{"text":1290,"config":1291},"Livraison de logiciels automatisée",{"href":1274,"dataGaLocation":1211,"dataGaName":1292},"Automated software delivery",{"title":1294,"description":1295,"link":1296,"items":1301},"Sécurité","Livrez du code plus rapidement sans compromettre la sécurité",{"config":1297},{"href":1298,"dataGaName":1299,"dataGaLocation":1211,"icon":1300},"/fr-fr/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[1302,1306,1311],{"text":1303,"config":1304},"Tests de sécurité des applications",{"href":1298,"dataGaName":1305,"dataGaLocation":1211},"Application security testing",{"text":1307,"config":1308},"Sécurité de la chaîne d'approvisionnement logicielle",{"href":1309,"dataGaLocation":1211,"dataGaName":1310},"/fr-fr/solutions/supply-chain/","Software supply chain security",{"text":1312,"config":1313},"Conformité logicielle",{"href":1314,"dataGaName":1315,"dataGaLocation":1211},"/fr-fr/solutions/software-compliance/","software compliance",{"title":1317,"link":1318,"items":1323},"Mesures",{"config":1319},{"icon":1320,"href":1321,"dataGaName":1322,"dataGaLocation":1211},"DigitalTransformation","/fr-fr/solutions/visibility-measurement/","visibility and measurement",[1324,1328,1333],{"text":1325,"config":1326},"Visibilité et mesures",{"href":1321,"dataGaLocation":1211,"dataGaName":1327},"Visibility and Measurement",{"text":1329,"config":1330},"Gestion de la chaîne de valeur",{"href":1331,"dataGaLocation":1211,"dataGaName":1332},"/fr-fr/solutions/value-stream-management/","Value Stream Management",{"text":1334,"config":1335},"Analyses et informations",{"href":1336,"dataGaLocation":1211,"dataGaName":1337},"/fr-fr/solutions/analytics-and-insights/","Analytics and insights",{"title":1339,"type":1262,"items":1340},"GitLab",[1341,1347,1353],{"text":1342,"config":1343},"Entreprises",{"icon":1344,"href":1345,"dataGaLocation":1211,"dataGaName":1346},"Building","/fr-fr/enterprise/","enterprise",{"text":1348,"config":1349},"Pour les PME",{"icon":1350,"href":1351,"dataGaLocation":1211,"dataGaName":1352},"Work","/fr-fr/small-business/","small business",{"text":1354,"config":1355},"Pour le secteur public",{"icon":1356,"href":1357,"dataGaLocation":1211,"dataGaName":1358},"Organization","/fr-fr/solutions/public-sector/","public sector",{"text":1360,"config":1361},"Tarifs",{"href":1362,"dataGaName":1363,"dataGaLocation":1211,"dataNavLevelOne":1363},"/fr-fr/pricing/","pricing",{"text":1365,"config":1366,"menu":1368},"Ressources",{"dataNavLevelOne":1367},"resources",{"type":1262,"link":1369,"columns":1373,"feature":1467},{"text":1370,"config":1371},"Afficher toutes les ressources",{"href":1372,"dataGaName":1367,"dataGaLocation":1211},"/fr-fr/resources/",[1374,1407,1434],{"title":1375,"items":1376},"Premiers pas",[1377,1382,1387,1392,1397,1402],{"text":1378,"config":1379},"Installation",{"href":1380,"dataGaName":1381,"dataGaLocation":1211},"/fr-fr/install/","install",{"text":1383,"config":1384},"Guides de démarrage",{"href":1385,"dataGaName":1386,"dataGaLocation":1211},"/fr-fr/get-started/","quick setup checklists",{"text":1388,"config":1389},"Apprentissage",{"href":1390,"dataGaLocation":1211,"dataGaName":1391},"https://university.gitlab.com/","learn",{"text":1393,"config":1394},"Documentation",{"href":1395,"dataGaName":1396,"dataGaLocation":1211},"https://docs.gitlab.com/","product documentation",{"text":1398,"config":1399},"Vidéos sur les bonnes pratiques",{"href":1400,"dataGaName":1401,"dataGaLocation":1211},"/fr-fr/getting-started-videos/","best practice videos",{"text":1403,"config":1404},"Intégrations",{"href":1405,"dataGaName":1406,"dataGaLocation":1211},"/fr-fr/integrations/","integrations",{"title":1408,"items":1409},"Découvrir",[1410,1415,1420,1425,1429],{"text":1411,"config":1412},"Témoignages clients",{"href":1413,"dataGaName":1414,"dataGaLocation":1211},"/fr-fr/customers/","customer success stories",{"text":1416,"config":1417},"Blog",{"href":1418,"dataGaName":1419,"dataGaLocation":1211},"/fr-fr/blog/","blog",{"text":1421,"config":1422},"Demo Hub",{"href":1423,"dataGaName":1424,"dataGaLocation":1211},"/fr-fr/demo-hub/","demo hub",{"text":1426,"config":1427},"The Source",{"href":1428,"dataGaName":1419,"dataGaLocation":1211},"/fr-fr/the-source/",{"text":1430,"config":1431},"Travail à distance",{"href":1432,"dataGaName":1433,"dataGaLocation":1211},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":1435,"items":1436},"Connecter",[1437,1442,1447,1452,1457,1462],{"text":1438,"config":1439},"Services GitLab",{"href":1440,"dataGaName":1441,"dataGaLocation":1211},"/fr-fr/services/","services",{"text":1443,"config":1444},"Contribuer",{"href":1445,"dataGaName":1446,"dataGaLocation":1211},"https://contributors.gitlab.com","contribute",{"text":1448,"config":1449},"Communauté",{"href":1450,"dataGaName":1451,"dataGaLocation":1211},"/community/","community",{"text":1453,"config":1454},"Forum",{"href":1455,"dataGaName":1456,"dataGaLocation":1211},"https://forum.gitlab.com/","forum",{"text":1458,"config":1459},"Événements",{"href":1460,"dataGaName":1461,"dataGaLocation":1211},"/events/","events",{"text":1463,"config":1464},"Partenaires",{"href":1465,"dataGaName":1466,"dataGaLocation":1211},"/fr-fr/partners/","partners",{"config":1468,"title":1471,"text":1472,"link":1473},{"background":1469,"textColor":1470},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","Nouveautés de GitLab","Découvrez les dernières fonctionnalités et améliorations.",{"text":1474,"config":1475},"Lire les articles les plus récents",{"href":1476,"dataGaName":1477,"dataGaLocation":1211},"/fr-fr/whats-new/","whats new",{"text":1479,"config":1480,"menu":1482},"Société",{"dataNavLevelOne":1481},"company",{"type":1262,"columns":1483},[1484],{"items":1485},[1486,1491,1497,1499,1504,1509,1514,1519,1524,1529],{"text":1487,"config":1488},"À propos",{"href":1489,"dataGaName":1490,"dataGaLocation":1211},"/fr-fr/company/","about",{"text":1492,"config":1493,"footerGa":1496},"Carrières",{"href":1494,"dataGaName":1495,"dataGaLocation":1211},"/jobs/","jobs",{"dataGaName":1495},{"text":1458,"config":1498},{"href":1460,"dataGaName":1461,"dataGaLocation":1211},{"text":1500,"config":1501},"Leadership",{"href":1502,"dataGaName":1503,"dataGaLocation":1211},"/company/team/e-group/","leadership",{"text":1505,"config":1506},"Manuel",{"href":1507,"dataGaName":1508,"dataGaLocation":1211},"https://handbook.gitlab.com/","handbook",{"text":1510,"config":1511},"Relations avec les investisseurs",{"href":1512,"dataGaName":1513,"dataGaLocation":1211},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":1515,"config":1516},"Trust Center",{"href":1517,"dataGaName":1518,"dataGaLocation":1211},"/fr-fr/security/","trust center",{"text":1520,"config":1521},"Centre pour la transparence de l'IA",{"href":1522,"dataGaName":1523,"dataGaLocation":1211},"/fr-fr/ai-transparency-center/","ai transparency center",{"text":1525,"config":1526},"Newsletter",{"href":1527,"dataGaName":1528,"dataGaLocation":1211},"/company/contact/#contact-forms","newsletter",{"text":1530,"config":1531},"Presse",{"href":1532,"dataGaName":1533,"dataGaLocation":1211},"/press/","press",{"text":1535,"config":1536,"menu":1537},"Nous contacter",{"dataNavLevelOne":1481},{"type":1262,"columns":1538},[1539],{"items":1540},[1541,1546,1551],{"text":1542,"config":1543},"Contacter l'équipe commerciale",{"href":1544,"dataGaName":1545,"dataGaLocation":1211},"/fr-fr/sales/","talk to sales",{"text":1547,"config":1548},"Assistance GitLab",{"href":1549,"dataGaName":1550,"dataGaLocation":1211},"https://support.gitlab.com/hc/en-us","support portal",{"text":1552,"config":1553},"Portail clients GitLab",{"href":1554,"dataGaName":1555,"dataGaLocation":1211},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":1557,"login":1558,"suggestions":1565},"Fermer",{"text":1559,"link":1560},"Pour rechercher des dépôts et des projets, connectez-vous à",{"text":1561,"config":1562},"GitLab.com",{"href":1225,"dataGaName":1563,"dataGaLocation":1564},"search login","search",{"text":1566,"default":1567},"Suggestions",[1568,1570,1575,1577,1582,1587],{"text":1242,"config":1569},{"href":1247,"dataGaName":688,"dataGaLocation":1564},{"text":1571,"config":1572},"Suggestions de code (IA)",{"href":1573,"dataGaName":1574,"dataGaLocation":1564},"/fr-fr/solutions/code-suggestions/","Code Suggestions (AI)",{"text":1278,"config":1576},{"href":1280,"dataGaName":1278,"dataGaLocation":1564},{"text":1578,"config":1579},"GitLab sur AWS",{"href":1580,"dataGaName":1581,"dataGaLocation":1564},"/fr-fr/partners/technology-partners/aws/","GitLab on AWS",{"text":1583,"config":1584},"GitLab sur Google Cloud",{"href":1585,"dataGaName":1586,"dataGaLocation":1564},"/fr-fr/partners/technology-partners/google-cloud-platform/","GitLab on Google Cloud",{"text":1588,"config":1589},"Pourquoi utiliser GitLab ?",{"href":1255,"dataGaName":1590,"dataGaLocation":1564},"Why GitLab?",{"freeTrial":1592,"mobileIcon":1597,"desktopIcon":1602,"secondaryButton":1605},{"text":1593,"config":1594},"Commencer votre essai gratuit",{"href":1595,"dataGaName":1216,"dataGaLocation":1596},"https://gitlab.com/-/trials/new/","nav",{"altText":1598,"config":1599},"Icône GitLab",{"src":1600,"dataGaName":1601,"dataGaLocation":1596},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":1598,"config":1603},{"src":1604,"dataGaName":1601,"dataGaLocation":1596},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":1606,"config":1607},"Commencer",{"href":1608,"dataGaName":1609,"dataGaLocation":1596},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/fr-fr/get-started/","get started",{"freeTrial":1611,"mobileIcon":1615,"desktopIcon":1617},{"text":1612,"config":1613},"En savoir plus sur GitLab Duo",{"href":1247,"dataGaName":1614,"dataGaLocation":1596},"gitlab duo",{"altText":1598,"config":1616},{"src":1600,"dataGaName":1601,"dataGaLocation":1596},{"altText":1598,"config":1618},{"src":1604,"dataGaName":1601,"dataGaLocation":1596},{"button":1620,"mobileIcon":1625,"desktopIcon":1627},{"text":1621,"config":1622},"/switch",{"href":1623,"dataGaName":1624,"dataGaLocation":1596},"#contact","switch",{"altText":1598,"config":1626},{"src":1600,"dataGaName":1601,"dataGaLocation":1596},{"altText":1598,"config":1628},{"src":1629,"dataGaName":1601,"dataGaLocation":1596},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":1631,"mobileIcon":1636,"desktopIcon":1638},{"text":1632,"config":1633},"Retour aux tarifs",{"href":1362,"dataGaName":1634,"dataGaLocation":1596,"icon":1635},"back to pricing","GoBack",{"altText":1598,"config":1637},{"src":1600,"dataGaName":1601,"dataGaLocation":1596},{"altText":1598,"config":1639},{"src":1604,"dataGaName":1601,"dataGaLocation":1596},{"title":1641,"button":1642,"config":1646},"GitLab Orbit est arrivé : la couche de contexte pour les agents d'IA.",{"text":1253,"config":1643},{"href":1644,"dataGaName":1645,"dataGaLocation":1211},"/fr-fr/gitlab-orbit/","orbit",{"layout":1647,"disabled":1191},"release",{"data":1649},{"text":1650,"source":1651,"edit":1657,"contribute":1662,"config":1666,"items":1671,"minimal":1878},"Git est une marque déposée de Software Freedom Conservancy et notre utilisation de « GitLab » est sous licence.",{"text":1652,"config":1653},"Afficher le code source de la page",{"href":1654,"dataGaName":1655,"dataGaLocation":1656},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":1658,"config":1659},"Modifier cette page",{"href":1660,"dataGaName":1661,"dataGaLocation":1656},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":1443,"config":1663},{"href":1664,"dataGaName":1665,"dataGaLocation":1656},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":1667,"facebook":1668,"youtube":1669,"linkedin":1670},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[1672,1717,1770,1813,1845],{"title":1360,"links":1673,"subMenu":1687},[1674,1678,1683],{"text":1675,"config":1676},"Voir les forfaits",{"href":1362,"dataGaName":1677,"dataGaLocation":1656},"view plans",{"text":1679,"config":1680},"GitLab Premium",{"href":1681,"dataGaName":1682,"dataGaLocation":1656},"/fr-fr/pricing/premium/","why premium",{"text":758,"config":1684},{"href":1685,"dataGaName":1686,"dataGaLocation":1656},"/fr-fr/pricing/ultimate/","why ultimate",[1688],{"title":1535,"links":1689},[1690,1692,1694,1697,1702,1707,1712],{"text":1542,"config":1691},{"href":1544,"dataGaName":1221,"dataGaLocation":1656},{"text":1547,"config":1693},{"href":1549,"dataGaName":1550,"dataGaLocation":1656},{"text":1695,"config":1696},"Portail clients",{"href":1554,"dataGaName":1555,"dataGaLocation":1656},{"text":1698,"config":1699},"Statut",{"href":1700,"dataGaName":1701,"dataGaLocation":1656},"https://status.gitlab.com/","status",{"text":1703,"config":1704},"Conditions d'utilisation",{"href":1705,"dataGaName":1706,"dataGaLocation":1656},"/terms/","terms of use",{"text":1708,"config":1709},"Politique de confidentialité",{"href":1710,"dataGaName":1711,"dataGaLocation":1656},"/fr-fr/privacy/","privacy statement",{"text":1713,"config":1714},"Gestion des cookies",{"dataGaName":1715,"dataGaLocation":1656,"id":1716,"isOneTrustButton":290},"cookie preferences","ot-sdk-btn",{"title":1258,"links":1718,"subMenu":1727},[1719,1723],{"text":1720,"config":1721},"Plateforme DevSecOps",{"href":1240,"dataGaName":1722,"dataGaLocation":1656},"devsecops platform",{"text":1724,"config":1725},"Développement assisté par l'IA",{"href":1247,"dataGaName":1726,"dataGaLocation":1656},"ai-assisted development",[1728],{"title":1729,"links":1730},"Thèmes",[1731,1735,1740,1745,1750,1755,1760,1765],{"text":1278,"config":1732},{"href":1733,"dataGaName":1734,"dataGaLocation":1656},"/fr-fr/topics/ci-cd/","cicd",{"text":1736,"config":1737},"GitOps",{"href":1738,"dataGaName":1739,"dataGaLocation":1656},"/fr-fr/topics/gitops/","gitops",{"text":1741,"config":1742},"DevOps",{"href":1743,"dataGaName":1744,"dataGaLocation":1656},"/fr-fr/topics/devops/","devops",{"text":1746,"config":1747},"Contrôle de version",{"href":1748,"dataGaName":1749,"dataGaLocation":1656},"/fr-fr/topics/version-control/","version control",{"text":1751,"config":1752},"DevSecOps",{"href":1753,"dataGaName":1754,"dataGaLocation":1656},"/fr-fr/topics/devsecops/","devsecops",{"text":1756,"config":1757},"Cloud-native",{"href":1758,"dataGaName":1759,"dataGaLocation":1656},"/fr-fr/topics/cloud-native/","cloud native",{"text":1761,"config":1762},"IA pour la programmation",{"href":1763,"dataGaName":1764,"dataGaLocation":1656},"/fr-fr/topics/devops/ai-for-coding/","ai for coding",{"text":1766,"config":1767},"IA agentique",{"href":1768,"dataGaName":1769,"dataGaLocation":1656},"/fr-fr/topics/agentic-ai/","agentic ai",{"title":1771,"links":1772},"Solutions",[1773,1776,1778,1783,1786,1789,1792,1795,1797,1800,1803,1808],{"text":1303,"config":1774},{"href":1298,"dataGaName":1775,"dataGaLocation":1656},"Application Security Testing",{"text":1290,"config":1777},{"href":1274,"dataGaName":1275,"dataGaLocation":1656},{"text":1779,"config":1780},"Développement Agile",{"href":1781,"dataGaName":1782,"dataGaLocation":1656},"/fr-fr/solutions/agile-delivery/","agile delivery",{"text":1285,"config":1784},{"href":1287,"dataGaName":1785,"dataGaLocation":1656},"source code management",{"text":1278,"config":1787},{"href":1280,"dataGaName":1788,"dataGaLocation":1656},"continuous integration & delivery",{"text":1329,"config":1790},{"href":1331,"dataGaName":1791,"dataGaLocation":1656},"value stream management",{"text":1736,"config":1793},{"href":1794,"dataGaName":1739,"dataGaLocation":1656},"/fr-fr/solutions/gitops/",{"text":1342,"config":1796},{"href":1345,"dataGaName":1346,"dataGaLocation":1656},{"text":1798,"config":1799},"PME",{"href":1351,"dataGaName":1352,"dataGaLocation":1656},{"text":1801,"config":1802},"Secteur public",{"href":1357,"dataGaName":1358,"dataGaLocation":1656},{"text":1804,"config":1805},"Éducation",{"href":1806,"dataGaName":1807,"dataGaLocation":1656},"/fr-fr/solutions/education/","education",{"text":1809,"config":1810},"Services financiers",{"href":1811,"dataGaName":1812,"dataGaLocation":1656},"/fr-fr/solutions/finance/","financial services",{"title":1365,"links":1814},[1815,1817,1819,1821,1824,1826,1829,1831,1833,1835,1837,1839,1841,1843],{"text":1378,"config":1816},{"href":1380,"dataGaName":1381,"dataGaLocation":1656},{"text":1383,"config":1818},{"href":1385,"dataGaName":1386,"dataGaLocation":1656},{"text":1388,"config":1820},{"href":1390,"dataGaName":1391,"dataGaLocation":1656},{"text":1393,"config":1822},{"href":1395,"dataGaName":1823,"dataGaLocation":1656},"docs",{"text":1416,"config":1825},{"href":1418,"dataGaName":1419,"dataGaLocation":1656},{"text":1827,"config":1828},"Nouveautés",{"href":1476,"dataGaName":1477,"dataGaLocation":1656},{"text":1411,"config":1830},{"href":1413,"dataGaName":1414,"dataGaLocation":1656},{"text":1430,"config":1832},{"href":1432,"dataGaName":1433,"dataGaLocation":1656},{"text":1438,"config":1834},{"href":1440,"dataGaName":1441,"dataGaLocation":1656},{"text":1443,"config":1836},{"href":1445,"dataGaName":1446,"dataGaLocation":1656},{"text":1448,"config":1838},{"href":1450,"dataGaName":1451,"dataGaLocation":1656},{"text":1453,"config":1840},{"href":1455,"dataGaName":1456,"dataGaLocation":1656},{"text":1458,"config":1842},{"href":1460,"dataGaName":1461,"dataGaLocation":1656},{"text":1463,"config":1844},{"href":1465,"dataGaName":1466,"dataGaLocation":1656},{"title":1479,"links":1846},[1847,1849,1851,1853,1855,1857,1862,1867,1869,1871,1873],{"text":1487,"config":1848},{"href":1489,"dataGaName":1481,"dataGaLocation":1656},{"text":1492,"config":1850},{"href":1494,"dataGaName":1495,"dataGaLocation":1656},{"text":1500,"config":1852},{"href":1502,"dataGaName":1503,"dataGaLocation":1656},{"text":1505,"config":1854},{"href":1507,"dataGaName":1508,"dataGaLocation":1656},{"text":1510,"config":1856},{"href":1512,"dataGaName":1513,"dataGaLocation":1656},{"text":1858,"config":1859},"Développement durable",{"href":1860,"dataGaName":1861,"dataGaLocation":1656},"/sustainability/","Sustainability",{"text":1863,"config":1864},"Diversité, inclusion et appartenance (DIB)",{"href":1865,"dataGaName":1866,"dataGaLocation":1656},"/fr-fr/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":1515,"config":1868},{"href":1517,"dataGaName":1518,"dataGaLocation":1656},{"text":1525,"config":1870},{"href":1527,"dataGaName":1528,"dataGaLocation":1656},{"text":1530,"config":1872},{"href":1532,"dataGaName":1533,"dataGaLocation":1656},{"text":1874,"config":1875},"Déclaration de transparence sur l'esclavage moderne",{"href":1876,"dataGaName":1877,"dataGaLocation":1656},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":1879},[1880,1882,1884],{"text":1703,"config":1881},{"href":1705,"dataGaName":1706,"dataGaLocation":1656},{"text":1713,"config":1883},{"dataGaName":1715,"dataGaLocation":1656,"id":1716,"isOneTrustButton":290},{"text":1708,"config":1885},{"href":1710,"dataGaName":1711,"dataGaLocation":1656},[1887],{"id":1888,"title":7,"body":1190,"config":1889,"content":1891,"description":1190,"extension":1895,"meta":1896,"navigation":290,"path":1897,"seo":1898,"stem":1899,"__hash__":1900},"blogAuthors/en-us/blog/authors/fernando-diaz.yml",{"template":1890},"BlogAuthor",{"name":7,"config":1892},{"headshot":1893,"ctfId":1894},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749659556/Blog/Author%20Headshots/fern_diaz.png","fjdiaz","yml",{},"/en-us/blog/authors/fernando-diaz",{},"en-us/blog/authors/fernando-diaz","lxRJIOydP4_yzYZvsPcuQevP9AYAKREF7i8QmmdnOWc",[1902,1910,1915],{"title":1903,"description":1904,"heroImage":1905,"category":1186,"date":1906,"authors":1907,"slug":1909,"externalUrl":1190},"Le flow GitLab Duo Security Review détecte les failles logiques que les scanners n'identifient pas","Utilisez le raisonnement de sécurité piloté par l'IA pour détecter les failles d'autorisation, les erreurs de logique métier et les conditions de concurrence pendant la revue de code.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1783980535/t3gez0gpayfndrhncunf.png","2026-07-17",[1908],"Mark Settle","gitlab-duo-security-review-flow",{"title":1911,"description":1912,"heroImage":1905,"category":1186,"date":1906,"authors":1913,"slug":1914,"externalUrl":1190},"Une mise à jour de version fait échouer votre build ? GitLab le corrige !","Mettez à niveau vos dépendances automatiquement, adaptez le code en cas de changements cassants et transférez les modifications pour approbation : découvrez ces fonctionnalités natives uniquement proposées par GitLab, avec un contexte complet.",[1908],"dependency-scanning-auto-remediation",{"title":1916,"description":1917,"heroImage":1918,"category":1186,"date":1919,"authors":1920,"slug":1922,"externalUrl":1190},"GitLab : 5 façons de corriger les niveaux de gravité trompeurs des vulnérabilités","Les scores CVSS par défaut ne reflètent pas vos risques réels. Utilisez les politiques de remplacement de la gravité GitLab pour automatiser les ajustements en fonction des CVE, des CWE, du chemin de fichier et du répertoire.","https://res.cloudinary.com/about-gitlab-com/image/upload/f_auto,q_auto,c_lfill/v1772630163/akp8ly2mrsfrhsb0liyb.png","2026-07-07",[1921],"Grant Hickman","severity-override-vulnerability-management-policy",{"promotions":1924},[1925,1939,1950,1961],{"id":1926,"categories":1927,"header":1929,"text":1930,"button":1931,"image":1936},"ai-modernization",[1928],"ai","L'IA tient-elle ses promesses à grande échelle ?","Le questionnaire ne prendra pas plus de 5 minutes.",{"text":1932,"config":1933},"Obtenez votre score de maturité IA",{"href":1934,"dataGaName":1935,"dataGaLocation":1419},"/fr-fr/assessments/ai-modernization-assessment/","modernization assessment",{"config":1937},{"src":1938},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":1940,"categories":1941,"header":1942,"text":1930,"button":1943,"image":1947},"devops-modernization",[1202,1754],"Vous contentez-vous de gérer des outils ou de livrer des innovations ?",{"text":1944,"config":1945},"Obtenez votre score de maturité DevOps",{"href":1946,"dataGaName":1935,"dataGaLocation":1419},"/fr-fr/assessments/devops-modernization-assessment/",{"config":1948},{"src":1949},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":1951,"categories":1952,"header":1953,"text":1930,"button":1954,"image":1958},"security-modernization",[1186],"Faut-il sacrifier la rapidité pour garantir la sécurité ?",{"text":1955,"config":1956},"Obtenez votre score de maturité en matière de sécurité",{"href":1957,"dataGaName":1935,"dataGaLocation":1419},"/fr-fr/assessments/security-modernization-assessment/",{"config":1959},{"src":1960},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"id":1962,"paths":1963,"header":1966,"text":1967,"button":1968,"image":1973},"github-azure-migration",[1964,1965],"migration-from-azure-devops-to-gitlab","integrating-azure-devops-scm-and-gitlab","Votre équipe est-elle prête pour la migration de GitHub vers Azure ?","GitHub a déjà commencé sa migration vers Azure. Découvrez ce que cela signifie pour vous.",{"text":1969,"config":1970},"Découvrez les différences entre GitLab et GitHub",{"href":1971,"dataGaName":1972,"dataGaLocation":1419},"/fr-fr/compare/gitlab-vs-github/github-azure-migration/","github azure migration",{"config":1974},{"src":1949},{"header":1976,"blurb":1977,"button":1978,"secondaryButton":1982},"Commencez à développer plus rapidement dès aujourd'hui","Découvrez ce que votre équipe peut accomplir avec la plateforme d'orchestration intelligente pour le DevSecOps.\n",{"text":1213,"config":1979},{"href":1980,"dataGaName":1216,"dataGaLocation":1981},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/fr-fr/","feature",{"text":1542,"config":1983},{"href":1544,"dataGaName":1221,"dataGaLocation":1981},1786803765186]