{"id":125,"date":"2026-09-13T20:56:43","date_gmt":"2026-09-13T20:56:43","guid":{"rendered":"https:\/\/neranis.com\/?post_type=nrn_service&#038;p=125"},"modified":"2026-09-13T20:56:43","modified_gmt":"2026-09-13T20:56:43","slug":"ci-cd-integration-de-la-securite-et-du-devsecops","status":"publish","type":"nrn_service","link":"https:\/\/neranis.com\/fr\/services\/ci-cd-security-and-devsecops-integration\/","title":{"rendered":"S\u00e9curit\u00e9 CI\/CD et int\u00e9gration DevSecOps"},"content":{"rendered":"<section class=\"wp-block-group nrn2-section nrn2-page-hero is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-breadcrumb wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/\">Accueil<\/a> <span aria-hidden=\"true\">\/<\/span> <a href=\"https:\/\/neranis.com\/fr\/expertise\/\">Expertise<\/a> \/ <a href=\"https:\/\/neranis.com\/fr\/expertise\/securite-des-applications\/\">S\u00e9curit\u00e9 des applications<\/a><\/p>\n\n\n<div class=\"wp-block-group nrn2-service-top nrn2-hero-layout-r3 is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-hero-split-copy is-layout-flow wp-block-group-is-layout-flow\">\n\n<p class=\"nrn2-kicker wp-block-paragraph\">APP \/ APP-03<\/p>\n\n\n<h1 class=\"wp-block-heading nrn2-title\">S\u00e9curit\u00e9 CI\/CD et int\u00e9gration DevSecOps<\/h1>\n\n\n<p class=\"nrn2-lead wp-block-paragraph\">Int\u00e9grer des contr\u00f4les de s\u00e9curit\u00e9 dans le d\u00e9veloppement et le d\u00e9ploiement avec des r\u00e8gles de blocage et d'exception compr\u00e9hensibles. Le projet prot\u00e8ge \u00e9galement la cha\u00eene de livraison des logiciels elle-m\u00eame : comptes, ex\u00e9cuteurs, secrets et autorisations.<\/p>\n\n<\/div>\n\n\n<figure class=\"wp-block-image size-full nrn2-context-image nrn2-visual-asset-service-family-app\"><img loading=\"lazy\" decoding=\"async\" width=\"1600\" height=\"500\" src=\"https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-app.webp\" alt=\"\" class=\"wp-image-250\" srcset=\"https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-app.webp 1600w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-app-300x94.webp 300w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-app-1024x320.webp 1024w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-app-768x240.webp 768w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-app-1536x480.webp 1536w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/><\/figure>\n<\/div>\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-service-top is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-service-intro is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">QUAND C'EST UTILE<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Une r\u00e9ponse cibl\u00e9e<br>\u00e0 un besoin d\u00e9fini.<\/h2>\n\n\n<p class=\"nrn2-body-lg wp-block-paragraph\">Des mises \u00e0 jour fr\u00e9quentes sans v\u00e9rifications syst\u00e9matiques, des secrets dans les pipelines, des ex\u00e9cutants sur-privil\u00e9gi\u00e9s ou une s\u00e9curit\u00e9 impliqu\u00e9e uniquement \u00e0 l\u2019issue du projet.<\/p>\n\n\n<div class=\"wp-block-buttons nrn2-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/neranis.com\/fr\/contact\/\">Discutez de ce service<\/a><\/div>\n\n<\/div>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-facts is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">EN UN COUP D'\u0152IL<\/p>\n\n\n<p class=\"wp-block-paragraph\"><strong>Famille<\/strong><br><a href=\"https:\/\/neranis.com\/fr\/expertise\/securite-des-applications\/\">S\u00e9curit\u00e9 des applications<\/a><\/p>\n\n\n<p class=\"wp-block-paragraph\"><strong>Engagement<\/strong><br>Conseil et mise en \u0153uvre<\/p>\n\n\n<p class=\"wp-block-paragraph\"><strong>R\u00e9f\u00e9rence<\/strong><br>APP-03<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section nrn2-canvas is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">PORT\u00c9E ET R\u00c9SULTATS<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Ce que couvre la mission.<\/h2>\n\n<\/div>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-delivery-grid is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-delivery-card is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Port\u00e9e<\/h3>\n\n\n<ul class=\"wp-block-list nrn2-list\">\n<li>R\u00e9pertoires<\/li>\n\n\n<li>branches prot\u00e9g\u00e9es<\/li>\n\n\n<li>Identit\u00e9s<\/li>\n\n\n<li>Permissions des coureurs<\/li>\n\n\n<li>secrets<\/li>\n\n\n<li>analyse du code\/de la d\u00e9pendance\/de l\u2019image<\/li>\n\n\n<li>r\u00e8gles d'approbation<\/li>\n\n\n<li>Art\u00e9facts<\/li>\n\n\n<li>Promotion de l'environnement<\/li>\n\n\n<li>exceptions<\/li>\n\n<\/ul>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-delivery-card is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Livrables<\/h3>\n\n\n<ul class=\"wp-block-list nrn2-list\">\n<li>Architecture de pipeline<\/li>\n\n\n<li>Configurations versionn\u00e9es<\/li>\n\n\n<li>Crit\u00e8res de blocage<\/li>\n\n\n<li>proc\u00e9dure d'exception<\/li>\n\n\n<li>r\u00e9sultats pilotes<\/li>\n\n\n<li>guide pour les d\u00e9veloppeurs<\/li>\n\n\n<li>Responsabilit\u00e9s et indicateurs<\/li>\n\n<\/ul>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-delivery-card nrn2-evidence is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Preuve de r\u00e9ception<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Un contr\u00f4le d\u2019essai est d\u00e9clench\u00e9 ; les secrets sont prot\u00e9g\u00e9s ; les droits de d\u00e9ploiement sont limit\u00e9s ; la livraison autoris\u00e9e est reproductible ; le blocage et les exceptions sont v\u00e9rifiables ; le temps de vie du pipeline est mesur\u00e9.<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">LIVRAISON<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Comment le travail est structur\u00e9.<\/h2>\n\n<\/div>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-two-col is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-prose is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Approche<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Comprendre l\u2019architecture ; s\u00e9lectionner les risques et les exigences ; int\u00e9grer ou v\u00e9rifier les contr\u00f4les ; tester ; les transmettre aux \u00e9quipes et planifier des contr\u00f4les de r\u00e9gression.<\/p>\n\n\n<h3 class=\"wp-block-heading\">Pr\u00e9requis et responsabilit\u00e9s<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Client : code, architecture, d\u00e9veloppeurs, environnement de test et acc\u00e8s au pipeline. Fournisseur : expertise et contr\u00f4les ; correction du code uniquement lorsqu'elle est incluse.<\/p>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-prose is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Facteurs de port\u00e9e<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Applications, langages, r\u00e9f\u00e9rentiels, d\u00e9pendances, r\u00f4les, pipelines, volume et profondeur. S\u00e9parer les licences d'outils, le d\u00e9veloppement de rem\u00e9diation et la maintenance.<\/p>\n\n\n<h3 class=\"wp-block-heading\">Questions \u00e0 clarifier<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Qui peut modifier et g\u00e9rer un pipeline ? Quels secrets permettent l\u2019acc\u00e8s \u00e0 la production ? Quels d\u00e9fauts doivent bloquer un d\u00e9ploiement et qui peut autoriser une exception ?<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section nrn2-compact is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-boundaries is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">LIMITES IMPORTANTES<\/p>\n\n\n<p class=\"nrn2-body-lg wp-block-paragraph\">Installer un scanner seul n\u2019est pas du DevSecOps. Les r\u00e8gles doivent \u00eatre maintenues et les exceptions ne doivent pas devenir des contournements permanents.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Les contr\u00f4les s'appliquent aux versions et au p\u00e9rim\u00e8tre convenus. Aucun scanner, SBOM ou framework ne garantit \u00e0 lui seul la s\u00e9curit\u00e9 du logiciel livr\u00e9.<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">EN PRATIQUE<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Situations illustratives.<\/h2>\n\n<\/div>\n\n\n<p class=\"nrn2-section-lead wp-block-paragraph\">Ces exemples d\u00e9crivent des engagements possibles et des r\u00e9sultats cibles. Il ne s'agit pas de r\u00e9f\u00e9rences clients ni de r\u00e9sultats obtenus.<\/p>\n\n<\/div>\n\n\n<details class=\"wp-block-details nrn2-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Sc\u00e9nario 01<\/summary>\n<p class=\"wp-block-paragraph\">Une \u00e9quipe publie des mises \u00e0 jour hebdomadaires sans v\u00e9rification de d\u00e9pendances. Projet : ajouter des contr\u00f4les progressivement et prioriser les r\u00e9sultats exploitables. Objectif : une s\u00e9curit\u00e9 int\u00e9gr\u00e9e sans un backlog de faux positifs incontr\u00f4lable.<\/p>\n\n<\/details>\n\n\n<details class=\"wp-block-details nrn2-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Sc\u00e9nario 02<\/summary>\n<p class=\"wp-block-paragraph\">Un pipeline dispose d\u2019un compte administrateur global. Projet : identit\u00e9s distinctes et restrictions des autorisations par environnement. R\u00e9sultats escompt\u00e9s : un test runner compromis est moins susceptible d\u2019exposer la production, gr\u00e2ce \u00e0 des limites v\u00e9rifi\u00e9es par des tests.<\/p>\n\n<\/details>\n\n\n<details class=\"wp-block-details nrn2-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Contexte technologique et de r\u00e9f\u00e9rence<\/summary>\n<p class=\"wp-block-paragraph\">Exemples : les plateformes CI\/CD existantes et les gestionnaires de secrets, la SAST\/SCA et les v\u00e9rifications d\u2019images, selon les technologies et les licences.<\/p>\n\n\n<p class=\"wp-block-paragraph\">L'ensemble final des technologies est convenu lors du cadrage, sur la base de l'interop\u00e9rabilit\u00e9, des licences, des droits d'acc\u00e8s et des exigences op\u00e9rationnelles.<\/p>\n\n<\/details>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">SERVICES CONNECT\u00c9S<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Construisez l'\u00e9tape suivante.<\/h2>\n\n<\/div>\n\n\n<p class=\"nrn2-section-lead wp-block-paragraph\">Ces services peuvent compl\u00e9ter la mission. Ils ne sont pas inclus automatiquement.<\/p>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-related-grid is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-service-card is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-ref wp-block-paragraph\">PEN-03<\/p>\n\n\n<h3 class=\"wp-block-heading\"><a href=\"https:\/\/neranis.com\/fr\/services\/web-application-penetration-testing\/\">Test d'intrusion d'applications web<\/a><\/h3>\n\n\n<p class=\"nrn2-card-desc wp-block-paragraph\">Tester les applications bas\u00e9es sur navigateur pour d\u00e9tecter les failles, en particulier au niveau de l'authentification, de l'autorisation et des flux de travail m\u00e9tier.<\/p>\n\n\n<p class=\"nrn2-text-link wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/services\/web-application-penetration-testing\/\">D\u00e9couvrir ce service <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-service-card is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-ref wp-block-paragraph\">REM-06<\/p>\n\n\n<h3 class=\"wp-block-heading\"><a href=\"https:\/\/neranis.com\/fr\/services\/reexamen-des-resultats-et-validation-de-la-fermeture\/\">Tests de rem\u00e9diation et validation de la cl\u00f4ture<\/a><\/h3>\n\n\n<p class=\"nrn2-card-desc wp-block-paragraph\">V\u00e9rification cibl\u00e9e confirmant que les vuln\u00e9rabilit\u00e9s ou lacunes identifi\u00e9es ont \u00e9t\u00e9 corrig\u00e9es, tout en maintenanat un lien clair avec la constatation d'origine.<\/p>\n\n\n<p class=\"nrn2-text-link wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/services\/reexamen-des-resultats-et-validation-de-la-fermeture\/\">D\u00e9couvrir ce service <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-cta is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">Commencer une conversation<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Clarifiez la port\u00e9e.<\/h2>\n\n<\/div>\n\n\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-body-lg wp-block-paragraph\">Nous clarifierons l'objectif, les d\u00e9pendances et les responsabilit\u00e9s de ce service avant de proposer la livraison.<\/p>\n\n\n<div class=\"wp-block-buttons nrn2-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/neranis.com\/fr\/contact\/\">Discutez de vos priorit\u00e9s<\/a><\/div>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>","protected":false},"excerpt":{"rendered":"<p>Int\u00e9grer des contr\u00f4les de s\u00e9curit\u00e9 dans le d\u00e9veloppement et le d\u00e9ploiement avec des r\u00e8gles de blocage et d'exception compr\u00e9hensibles. Le projet prot\u00e8ge \u00e9galement la cha\u00eene de livraison des logiciels elle-m\u00eame : comptes, ex\u00e9cuteurs, secrets et autorisations.<\/p>","protected":false},"featured_media":0,"template":"single-nrn_service","meta":{"footnotes":""},"nrn_family":[14],"class_list":["post-125","nrn_service","type-nrn_service","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service\/125","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service"}],"about":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/types\/nrn_service"}],"version-history":[{"count":2,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service\/125\/revisions"}],"predecessor-version":[{"id":520,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service\/125\/revisions\/520"}],"wp:attachment":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/media?parent=125"}],"wp:term":[{"taxonomy":"nrn_family","embeddable":true,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_family?post=125"}],"curies":[{"name":"Bien jou\u00e9","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}