Git分支策略与流水线联动：日均200次提交的协作方案

# reviewer_assign.py
import random
from collections import Counter

def assign_reviewer(mr_author, changed_files, team_skill_map):
    # team_skill_map: {member: [files_keywords]}
    scores = Counter()
    for member, keywords in team_skill_map.items():
        if member == mr_author:
            continue
        # 计算文件匹配分
        match_score = sum(1 for f in changed_files if any(k in f for k in keywords))
        # 最近review次数惩罚，避免过载
        recent_count = review_history[member][-5:].count(1)
        scores[member] = match_score * 2 - recent_count * 1.5
    # 取最高分且未被占用的
    candidate = max(scores.items(), key=lambda x: x[1])[0]
    return candidate

# 调用示例
print(assign_reviewer("zhangsan", ["src/api/user.py", "tests/test_user.py"], 
    {"lisi": ["api", "test"], "wangwu": ["user", "model"]}))

// Jenkinsfile (truncated)
pipeline {
    agent { label 'docker-builder' }
    triggers {
        // 只有MR的源分支push触发，避免重复构建
        gitlab(triggerOnPush: true, triggerOnMergeRequest: true, 
               branchFilterType: 'regex', branchFilter: '^(feature|hotfix)/.*')
    }
    stages {
        stage('Security Scan') {
            steps {
                // 使用Trivy扫描依赖漏洞，fail on critical
                sh 'trivy fs --exit-code 1 --severity CRITICAL .'
            }
        }
        stage('Unit Test & Coverage') {
            steps {
                sh 'pytest --cov=app --cov-fail-under=85 --junitxml=report.xml'
            }
            post {
                success { junit 'report.xml' }
                failure { slackSend(color: 'danger', message: "Test failed for ${env.GIT_BRANCH}") }
            }
        }
        stage('Integration Test') {
            // 仅当main或release分支才跑完整集成测试
            when { branch pattern: '^(main|release/.*)$', comparator: 'REGEXP' }
            steps {
                sh './scripts/e2e.sh --env staging'
            }
        }
        stage('Build & Push Image') {
            steps {
                sh 'docker build -t registry.internal/app:${GIT_COMMIT} .'
                sh 'docker push registry.internal/app:${GIT_COMMIT}'
            }
        }
    }
    post {
        failure {
            // 自动向MR添加评论并打上ci-failed标签
            addGitLabMRComment(comment: "❌ Pipeline failed: ${env.BUILD_URL}")
            updateGitLabMRStatus(status: 'failed')
        }
    }
}

#!/bin/bash
# 使用GitLab API获取最近成功的流水线产物
LAST_GOOD_COMMIT=$(curl -s --header "PRIVATE-TOKEN: $TOKEN" \
  "https://gitlab.internal/api/v4/projects/123/pipelines?status=success&ref=main&per_page=1" | jq -r '.[0].sha')
echo "Rolling back from $CURRENT_COMMIT to $LAST_GOOD_COMMIT"
# 强制推送旧的稳定版本到生产分支（需受保护）
git push --force origin $LAST_GOOD_COMMIT:production
# 触发生产部署流水线（约30秒完成）
curl -X POST --header "PRIVATE-TOKEN: $TOKEN" \
  "https://gitlab.internal/api/v4/projects/123/trigger/pipeline" -F "ref=production" -F "token=$DEPLOY_TRIGGER"