Tendances & futur du métier de FullStack Developer

# GitHub Actions – gate sécurité (extrait)
on: [pull_request]
jobs:
  sec:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: npm ci && npm run build
      - run: trivy fs --exit-code 1 --severity HIGH,CRITICAL .
      - run: syft packages dir:. -o cyclonedx-json > sbom.json

# Conftest (policy IaC – ex.)
deny[msg] {
  input.kind == "Deployment"
  not input.spec.template.spec.securityContext.runAsNonRoot
  msg := "Containers doivent runAsNonRoot"
}

# serverless.yml (extrait – AWS)
functions:
  hello:
    handler: handler.hello
    events: [{ httpApi: { path: /hello, method: get } }]

# Cloud Run – Dockerfile minimal
FROM gcr.io/distroless/nodejs20
WORKDIR /app
COPY dist .
CMD ["server.js"]

# SDL (ex.)
type Query { me: User!, search(q:String!): [Result!]! }
directive @cache(ttl:Int) on FIELD_DEFINITION

// DataLoader (ex.)
const loader = new DataLoader(keys => batchFetch(keys))

# Gabarit prompt PR-review (ex.)
Context: diff + objectifs
Check: sécu, perf, lisibilité, invariants
Output: 5 risques + patchs suggérés

# Script “AI guardrail” (pseudo)
if prompt.contains(secrets|PII): block()
if file not in repo scope: block()

# Politique connecteur (ex.)
role=viewer if app==lowcode and data==PII

# Stratégie “exit”
Re-implémentation API-first si trafic > seuil ou besoins spécifiques

# Backstage – entity (extrait)
apiVersion: backstage.io/v1alpha1
kind: Component
metadata: {name: "svc-payments"}
spec: {type: service, owner: "team-payments", lifecycle: production}

# Golden Path – checklist
CI/CD | Sécu | Observabilité | Docs | Runbook | Performance

// Worker (ex.)
export default { fetch: () => new Response("ok") }

// WASM (pseudo)
const mod = await WebAssembly.instantiate(bytes); mod.instance.exports.run()

// devcontainer.json (extrait)
{ "image":"mcr.microsoft.com/devcontainers/javascript-node:20",
  "forwardPorts":[3000,5432], "postCreateCommand":"npm ci" }

# Makefile (ex.)
setup: ; npm ci
preview: ; gh codespace create -r org/app -b feat-x