Git分支策略与CI/CD集成：一套支撑30人团队高效协作的工作流配置实践

{
  "scripts": {
    "prepare": "husky",
    "lint:staged": "lint-staged"
  },
  "lint-staged": {
    "*.{js,ts,vue}": ["eslint --fix --max-warnings=0", "prettier --write"],
    "*.{json,md,yml,yaml}": ["prettier --write"]
  },
  "devDependencies": {
    "husky": "9.0.11",
    "commitlint": "19.0.3",
    "@commitlint/cli": "19.0.3",
    "@commitlint/config-conventional": "19.0.3",
    "lint-staged": "15.2.2"
  }
}

module.exports = {
  extends: ['@commitlint/config-conventional'],
  rules: {
    'type-enum': [2, 'always', [
      'feat', 'fix', 'docs', 'style', 'refactor',
      'perf', 'test', 'build', 'ci', 'chore', 'revert'
    ]],
    'subject-case': [0],
    'header-max-length': [2, 'always', 100],
    // 强制带 Jira 号，格式如 feat(PROJ-1234): xxx
    'scope-empty': [2, 'never']
  }
};

#!/usr/bin/env sh
npx --no -- commitlint --edit "$1"

#!/usr/bin/env sh
npx --no -- lint-staged

stages:
  - validate
  - build
  - test
  - deploy

variables:
  PNPM_VERSION: "9.1.0"
  MAVEN_OPTS: "-Dmaven.repo.local=.m2/repository"
  HUSKY: "0"

default:
  interruptible: true
  retry:
    max: 1
    when: [runner_system_failure, stuck_or_timeout_failure]

# ---------- 校验阶段 ----------
commitlint:
  stage: validate
  image: node:20.11.1-alpine
  rules:
    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
  script:
    - npm i -g @commitlint/cli@19.0.3 @commitlint/config-conventional@19.0.3
    - npx commitlint --from "$CI_MERGE_REQUEST_DIFF_BASE_SHA" --to "$CI_COMMIT_SHA" --verbose

mr-diff-size:
  stage: validate
  image: alpine:3.19
  rules:
    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
  script:
    - apk add --no-cache git curl jq
    - |
      LINES=$(git diff --numstat "$CI_MERGE_REQUEST_DIFF_BASE_SHA" "$CI_COMMIT_SHA" | awk '{a+=$1; d+=$2} END {print a+d}')
      echo "MR diff lines: $LINES"
      if [ "$LINES" -gt 400 ]; then
        curl -s -X POST -H "PRIVATE-TOKEN: $GITLAB_API_TOKEN" \
          "$CI_API_V4_URL/projects/$CI_PROJECT_ID/merge_requests/$CI_MERGE_REQUEST_IID/notes" \
          -d "body=⚠️ 本次 MR 改动 ${LINES} 行，超过 400 行软上限，请考虑拆分后 review。"
      fi

# ---------- 构建阶段 ----------
build-backend:
  stage: build
  image: maven:3.9.6-eclipse-temurin-17
  rules:
    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
    - if: '$CI_COMMIT_BRANCH == "main"'
    - if: '$CI_COMMIT_TAG =~ /^v\d+\.\d+\.\d+$/'
  cache:
    key: "maven-$CI_COMMIT_REF_SLUG"
    paths: [.m2/repository]
  script:
    - mvn -B -DskipTests package
  artifacts:
    paths: [target/*.jar]
    expire_in: 3 days

build-frontend:
  stage: build
  image: node:20.11.1-alpine
  rules:
    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
    - if: '$CI_COMMIT_BRANCH == "main"'
    - if: '$CI_COMMIT_TAG =~ /^v\d+\.\d+\.\d+$/'
  cache:
    key:
      files: [pnpm-lock.yaml]
    paths: [.pnpm-store]
  script:
    - corepack enable && corepack prepare pnpm@$PNPM_VERSION --activate
    - pnpm config set store-dir .pnpm-store
    - pnpm install --frozen-lockfile
    - pnpm build
  artifacts:
    paths: [dist/]
    expire_in: 3 days

# ---------- 测试阶段 ----------
unit-test-backend:
  stage: test
  image: maven:3.9.6-eclipse-temurin-17
  needs: [build-backend]
  rules:
    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
    - if: '$CI_COMMIT_BRANCH == "main"'
  script:
    - mvn -B test
  coverage: '/Total.*?([0-9]{1,3})%/'
  artifacts:
    when: always
    reports:
      junit: target/surefire-reports/TEST-*.xml

sonarqube:
  stage: test
  image: sonarsource/sonar-scanner-cli:5.0
  needs: [unit-test-backend]
  rules:
    - if: '$CI_COMMIT_BRANCH == "main"'
    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
  variables:
    SONAR_HOST_URL: "https://sonar.internal.example.com"
  script:
    - sonar-scanner
      -Dsonar.projectKey=$CI_PROJECT_PATH_SLUG
      -Dsonar.qualitygate.wait=true
      -Dsonar.qualitygate.timeout=300
  allow_failure: false

# ---------- 部署阶段 ----------
deploy-staging:
  stage: deploy
  image: bitnami/kubectl:1.28
  needs: [build-backend, build-frontend, unit-test-backend]
  rules:
    - if: '$CI_COMMIT_BRANCH == "main"'
  environment:
    name: staging
    url: https://staging.example.com
  script:
    - echo "$KUBE_CONFIG_STAGING" | base64 -d > /tmp/kubeconfig
    - export KUBECONFIG=/tmp/kubeconfig
    - kubectl -n app set image deployment/backend backend=registry.example.com/app/backend:$CI_COMMIT_SHORT_SHA --record
    - kubectl -n app rollout status deployment/backend --timeout=180s

deploy-prod:
  stage: deploy
  image: bitnami/kubectl:1.28
  needs: [build-backend, build-frontend]
  rules:
    - if: '$CI_COMMIT_TAG =~ /^v\d+\.\d+\.\d+$/'
      when: manual
  environment:
    name: production
    url: https://app.example.com
  script:
    - echo "$KUBE_CONFIG_PROD" | base64 -d > /tmp/kubeconfig
    - export KUBECONFIG=/tmp/kubeconfig
    - kubectl -n app set image deployment/backend backend=registry.example.com/app/backend:$CI_COMMIT_TAG --record
    - kubectl -n app rollout status deployment/backend --timeout=300s