diff --git a/.gitea/workflows/cd-main.yml b/.gitea/workflows/cd-main.yml
index b9ae13c..0bd63b7 100644
--- a/.gitea/workflows/cd-main.yml
+++ b/.gitea/workflows/cd-main.yml
@@ -9,6 +9,9 @@ jobs:
   deploy:
     runs-on: self-hosted
 
+    # 🔒 PROTECTION : empêche toute exécution via `act`
+    if: ${{ !env.ACT }}
+
     steps:
 
       # 1) S'assurer que Node.js est installé
@@ -99,7 +102,7 @@ jobs:
 
           cd "$GITHUB_WORKSPACE"
           ls -l secrets/
-          
+
           docker-compose -f docker-compose-prod.yml pull || true
           docker-compose -f docker-compose-prod.yml down --remove-orphans
           docker-compose -f docker-compose-prod.yml up -d --build