Skip to content

ci: setup GitHub Actions CI/CD pipeline#40

Open
szj2ys wants to merge 1 commit intoBIT-DataLab:mainfrom
szj2ys:T0-cicd-setup
Open

ci: setup GitHub Actions CI/CD pipeline#40
szj2ys wants to merge 1 commit intoBIT-DataLab:mainfrom
szj2ys:T0-cicd-setup

Conversation

@szj2ys
Copy link

@szj2ys szj2ys commented Mar 14, 2026

Summary

  • Add comprehensive CI/CD configuration for automated testing and deployment
  • Enable quality gates on pull requests and pushes to main/develop branches

Changes

  • .github/workflows/ci.yml: Multi-matrix Python testing (3.10/3.11/3.12), backend linting with flake8/black/isort, frontend build verification (conditional), security scanning with Trivy and Bandit, coverage reporting via Codecov, build artifact generation
  • .github/dependabot.yml: Automated dependency updates for pip, npm (apps/web), and GitHub Actions (weekly schedule)
  • .github/PULL_REQUEST_TEMPLATE/pull_request_template.md: Standardized PR template with summary, changes, test plan, and checklist sections
  • pyproject.toml: Pytest configuration with markers for unit/integration/slow tests, coverage settings, and tool configs for black/isort/flake8

Test Plan

  • CI workflow triggers on PR creation
  • Python matrix tests (3.10, 3.11, 3.12) pass
  • Backend linting checks execute successfully
  • Frontend build job runs when apps/web/package.json exists
  • Security scanning completes without blocking issues
  • Coverage report uploads to Codecov

Related Issues

  • Part of Phase 0 CI/CD setup initiative

Add comprehensive CI/CD configuration:
- ci.yml: Multi-matrix Python testing (3.10/3.11/3.12), backend linting
  with flake8/black/isort, frontend build verification, security scanning
  with Trivy and Bandit, coverage reporting via Codecov
- dependabot.yml: Automated dependency updates for pip, npm, GitHub Actions
- pull_request_template.md: Standardized PR template
- pyproject.toml: Pytest markers (unit/integration/slow), coverage config,
  black/isort/flake8 tool settings

Enables automated testing on push/PR and build artifact generation.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant