diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 99d422c..d10f45b 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -16,11 +16,8 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Tests (vitest)
-        run: |
-          docker run --rm -v "$PWD/DataSentinel":/app -w /app node:22-alpine \
-            sh -c 'corepack enable && pnpm install --frozen-lockfile && pnpm test'
-
+      # Les tests vitest tournent pendant le build Docker (RUN pnpm test) :
+      # pas de bind-mount (incompatible docker-in-docker du runner).
       - name: Build & push image
         run: |
           set -e
diff --git a/DataSentinel/Dockerfile b/DataSentinel/Dockerfile
index bb607cc..2ecad95 100644
--- a/DataSentinel/Dockerfile
+++ b/DataSentinel/Dockerfile
@@ -4,6 +4,8 @@ WORKDIR /app
 COPY package.json pnpm-lock.yaml ./
 RUN corepack enable && pnpm install --frozen-lockfile
 COPY . .
+# Tests (vitest) exécutés pendant le build : un test rouge casse le build.
+RUN pnpm test
 # URL de l'API injectée au build (Vite inline les import.meta.env.VITE_*).
 ARG VITE_API_URL
 ENV VITE_API_URL=$VITE_API_URL