diff --git a/.gitea/workflows/test-ci.yml b/.gitea/workflows/test-ci.yml
index 83fa338..289e1bb 100644
--- a/.gitea/workflows/test-ci.yml
+++ b/.gitea/workflows/test-ci.yml
@@ -24,3 +24,16 @@ jobs:
         run: |
           echo "🔍 Lancement du scan Gitleaks..."
           podman run --rm -v "$PWD":/path:z docker.io/zricethezav/gitleaks:v8.18.2 detect --source="/path" -v
+
+  trivy-iac-scan:
+    name: IaC Security & Vulnerability Scan (Trivy)
+    runs-on: host
+    needs: gitleaks-scan
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v4
+
+      - name: Run Trivy IaC Scan
+        run: |
+          echo "🛡️ Analyse des fichiers d'infrastructure et des vulnérabilités..."
+          podman run --rm -v "$PWD":/path:z aquasec/trivy:latest config /path