交付流水线
github-actions
更新于 2026-09-05
GitHub Actions 工程规则
Actions rules: SHA-pinned actions, minimal permissions and cached lockfile builds
- 技术栈
- GitHub Actions
- 主题
- 工程基线
- 条目
- 9 条
- 版本
- v0.2.0
✓ 应当这么做
- ✓ Make pipeline stages fail fast: format, lint, typecheck, test, build
- ✓ Pin action versions by commit SHA for anything touching credentials
- ✓ Cache dependencies keyed by the lockfile hash
✕ 常见反模式
- ✕ Secrets echoed into job logs or issues
- ✕ Pipelines that only run on the default branch
- ✕ Artifacts built twice with different toolchains across jobs
◎ 交付前验证
- ◎ Pipeline runtime measured; long jobs identified
- ◎ Required checks are enforced on merges
- ◎ Rollback job executed once against a real environment