ci

Local CI Pipeline

Run comprehensive CI gates locally before pushing code.

Usage

/ci                    # Run all gates
/ci --quick           # Lint + build only
/ci --security        # All gates + extra security

Pipeline Gates

Execute gates sequentially. Stop on first failure.

Gate 1: Lint & Format

# Detect project type and run appropriate linter
if [ -f "package.json" ]; then
    npm run lint 2>/dev/null || npx eslint . --ext .js,.ts,.tsx
    npm run format:check 2>/dev/null || npx prettier --check .
fi

if [ -f "pyproject.toml" ] || [ -f "setup.py" ]; then
    ruff check . 2>/dev/null || python -m flake8 .
    black --check . 2>/dev/null || true
fi

if [ -f "go.mod" ]; then
    go fmt ./...
    golangci-lint run 2>/dev/null || true
fi

Pass criteria: No lint errors, code formatted

Gate 2: Type Check

# TypeScript
if [ -f "tsconfig.json" ]; then
    npx tsc --noEmit
fi

# Python
if [ -f "pyproject.toml" ]; then
    mypy . 2>/dev/null || pyright . 2>/dev/null || true
fi

Pass criteria: No type errors

Gate 3: Build

# Node.js
if [ -f "package.json" ]; then
    npm run build
fi

# Python
if [ -f "setup.py" ] || [ -f "pyproject.toml" ]; then
    pip install -e . 2>/dev/null || python -m build
fi

# Go
if [ -f "go.mod" ]; then
    go build ./...
fi

# Docker
if [ -f "Dockerfile" ]; then
    docker build -t ci-test .
fi

Pass criteria: Build succeeds without errors

Gate 4: Test

# Node.js
if [ -f "package.json" ]; then
    npm test -- --coverage --passWithNoTests
fi

# Python
if [ -f "pytest.ini" ] || [ -f "pyproject.toml" ]; then
    pytest --cov --cov-fail-under=80 2>/dev/null || pytest
fi

# Go
if [ -f "go.mod" ]; then
    go test -cover ./...
fi

Pass criteria: Tests pass, coverage >= 80% (if enforced)

Gate 5: Security Scan

# Node.js dependencies
if [ -f "package-lock.json" ]; then
    npm audit --audit-level=high
fi

# Python dependencies
if [ -f "requirements.txt" ]; then
    pip-audit 2>/dev/null || safety check 2>/dev/null || true
fi

# Secret detection
npx secretlint "**/*" 2>/dev/null || \
    gitleaks detect --source . 2>/dev/null || \
    trufflehog filesystem . 2>/dev/null || \
    echo "No secret scanner available - manual review required"