From f5cac1c2a8169dbf3a71113dd8babe4101bced78 Mon Sep 17 00:00:00 2001
From: Valentin <valentin.defariarodrigues2022@campus-eni.fr>
Date: Thu, 17 Sep 2026 12:25:15 +0200
Subject: [PATCH] =?UTF-8?q?chore(ci):=20ajoute=20un=20audit=20de=20s=C3=A9?=
 =?UTF-8?q?curit=C3=A9=20des=20d=C3=A9pendances=20(npm=20audit,=20pip-audi?=
 =?UTF-8?q?t)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/backend.yml  |  3 +++
 .github/workflows/frontend.yml | 25 ++++++++++++++++++++-----
 2 files changed, 23 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/backend.yml b/.github/workflows/backend.yml
index b146eb5..dbe77f6 100644
--- a/.github/workflows/backend.yml
+++ b/.github/workflows/backend.yml
@@ -56,3 +56,6 @@ jobs:
       # Le marqueur `integration` est exclu par défaut, donc aucune base n'est nécessaire ici.
       - name: Tests et couverture
         run: uv run pytest --cov-fail-under=85
+
+      - name: Audit de sécurité des dépendances
+        run: uv run --with pip-audit pip-audit
diff --git a/.github/workflows/frontend.yml b/.github/workflows/frontend.yml
index 98d5d53..2fa84fd 100644
--- a/.github/workflows/frontend.yml
+++ b/.github/workflows/frontend.yml
@@ -36,13 +36,13 @@ jobs:
           node-version: 24
           cache: npm
           cache-dependency-path: apps/frontend/package-lock.json
-      
-      - run: npm ci 
+
+      - run: npm ci
         working-directory: apps/frontend
       - run: npm run build
         working-directory: apps/frontend
 
-  test:  
+  security-audit:
     needs: build
     runs-on: ubuntu-latest
     steps:
@@ -52,7 +52,22 @@ jobs:
           node-version: 24
           cache: npm
           cache-dependency-path: apps/frontend/package-lock.json
-      - run: npm ci 
+      - run: npm ci
+        working-directory: apps/frontend
+      - run: npm audit --audit-level=high
+        working-directory: apps/frontend
+
+  test:
+    needs: build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 24
+          cache: npm
+          cache-dependency-path: apps/frontend/package-lock.json
+      - run: npm ci
         working-directory: apps/frontend
       - run: npm test -- --watch=false
         working-directory: apps/frontend
@@ -70,7 +85,7 @@ jobs:
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
 
-    
+
   # deploy:
   #   runs-on: ubuntu-latest
   #   steps: