harden long-running scans and simplify CLI output #412
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: 测试构建 | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - dev | |
| - dev-* | |
| - develop | |
| - feature/* | |
| paths-ignore: | |
| - '*.md' | |
| - '*.txt' | |
| - 'README*' | |
| - 'LICENSE*' | |
| - 'image/**' | |
| - 'TestDocker/**' | |
| - '**/*.png' | |
| - '**/*.jpg' | |
| - '**/*.jpeg' | |
| pull_request: | |
| branches: | |
| - main | |
| - master | |
| - dev | |
| paths-ignore: | |
| - '*.md' | |
| - '*.txt' | |
| - 'README*' | |
| - 'LICENSE*' | |
| - 'image/**' | |
| - 'TestDocker/**' | |
| - '**/*.png' | |
| - '**/*.jpg' | |
| - '**/*.jpeg' | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| env: | |
| FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true | |
| jobs: | |
| lint: | |
| name: 代码检查 | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 10 | |
| steps: | |
| - name: 检出代码 | |
| uses: actions/checkout@v4 | |
| - name: 设置 Go 环境 | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version: '1.25.12' | |
| cache: true | |
| - name: 运行 golangci-lint | |
| run: | | |
| # 安装 golangci-lint v2 (需 Go 1.22+，仅用于静态分析，不影响二进制兼容性) | |
| go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.12.1 | |
| # 运行检查 | |
| golangci-lint run --timeout=5m > lint_output.txt 2>&1 || true | |
| cat lint_output.txt | |
| # 过滤非关键问题（复杂度建议和 staticcheck 风格建议不阻塞 CI） | |
| CRITICAL=$(grep -E "\.go:[0-9]+:[0-9]+:" lint_output.txt \ | |
| | grep -vE "gocognit|gocyclo|QF[0-9]+| S[0-9]+|ST[0-9]+" || true) | |
| if [ -n "$CRITICAL" ]; then | |
| echo "❌ Linting failed with critical issues:" | |
| echo "$CRITICAL" | head -20 | |
| exit 1 | |
| fi | |
| echo "✅ Lint 检查通过" | |
| - name: 检查代码复杂度（质量门禁） | |
| run: | | |
| echo "### 🚦 复杂度质量门禁" >> $GITHUB_STEP_SUMMARY | |
| echo "" >> $GITHUB_STEP_SUMMARY | |
| # 检查认知复杂度>80的函数 | |
| COMPLEX_FUNCS=$(golangci-lint run --disable-all --enable=gocognit --out-format=line-number 2>&1 | grep "cognitive complexity" | grep -v "typechecking" || true) | |
| if [ -n "$COMPLEX_FUNCS" ]; then | |
| HIGH_COMPLEX=$(echo "$COMPLEX_FUNCS" | awk '{print $NF}' | sed 's/[()]//g' | awk -F'>' '{if ($1 > 80) print}' | wc -l) | |
| if [ "$HIGH_COMPLEX" -gt 0 ]; then | |
| echo "❌ **发现 $HIGH_COMPLEX 个复杂度>80的函数**" >> $GITHUB_STEP_SUMMARY | |
| echo "" >> $GITHUB_STEP_SUMMARY | |
| echo '```' >> $GITHUB_STEP_SUMMARY | |
| echo "$COMPLEX_FUNCS" | awk '{print $NF}' | sed 's/[()]//g' | awk -F'>' '{if ($1 > 80) print "复杂度:", $1, "- 必须重构"}' >> $GITHUB_STEP_SUMMARY | |
| echo '```' >> $GITHUB_STEP_SUMMARY | |
| echo "" >> $GITHUB_STEP_SUMMARY | |
| echo "⚠️ 请重构复杂度>80的函数后再提交" >> $GITHUB_STEP_SUMMARY | |
| exit 1 | |
| fi | |
| fi | |
| echo "✅ 代码复杂度检查通过（所有函数≤80）" >> $GITHUB_STEP_SUMMARY | |
| test: | |
| name: 单元测试和构建 | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 10 | |
| needs: lint | |
| steps: | |
| - name: 检出代码 | |
| uses: actions/checkout@v4 | |
| - name: 设置 Go 环境 | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version: '1.25.12' | |
| cache: true | |
| - name: 下载依赖 | |
| run: | | |
| go mod download | |
| go mod verify | |
| - name: 运行测试 | |
| run: | | |
| # 排除第三方grdp库测试（存在环境依赖问题） | |
| PKGS=$(go list ./... | grep -v '/libs/grdp/') | |
| go test -vet=off -race -coverprofile=coverage.out -covermode=atomic $PKGS | |
| - name: 上传覆盖率 | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: coverage-report | |
| path: coverage.out | |
| retention-days: 7 | |
| - name: 显示覆盖率 | |
| run: | | |
| echo "### 测试覆盖率报告" >> $GITHUB_STEP_SUMMARY | |
| echo "" >> $GITHUB_STEP_SUMMARY | |
| go tool cover -func=coverage.out >> $GITHUB_STEP_SUMMARY | |
| - name: 检查覆盖率（质量门禁） | |
| run: | | |
| echo "" >> $GITHUB_STEP_SUMMARY | |
| echo "### 🚦 覆盖率质量门禁" >> $GITHUB_STEP_SUMMARY | |
| echo "" >> $GITHUB_STEP_SUMMARY | |
| # 提取总体覆盖率（awk 整数比较，不需要 bc） | |
| TOTAL_COVERAGE=$(go tool cover -func=coverage.out | grep total | awk '{print int($3)}') | |
| echo "总体覆盖率: ${TOTAL_COVERAGE}%" >> $GITHUB_STEP_SUMMARY | |
| echo "" >> $GITHUB_STEP_SUMMARY | |
| # 警告阈值：总体<40% | |
| if [ "$TOTAL_COVERAGE" -lt 40 ]; then | |
| echo "⚠️ **警告**: 总体覆盖率 ${TOTAL_COVERAGE}% < 40%，建议补充测试" >> $GITHUB_STEP_SUMMARY | |
| fi | |
| # 检查是否有新增的未测试文件（0%覆盖率） | |
| ZERO_COVERAGE_FILES=$(go tool cover -func=coverage.out | awk '$3 == "0.0%" && $1 !~ /_test\.go/' | wc -l) | |
| if [ "$ZERO_COVERAGE_FILES" -gt 0 ]; then | |
| echo "⚠️ **警告**: 发现 $ZERO_COVERAGE_FILES 个文件覆盖率为0%" >> $GITHUB_STEP_SUMMARY | |
| echo "" >> $GITHUB_STEP_SUMMARY | |
| echo "请为新代码补充单元测试" >> $GITHUB_STEP_SUMMARY | |
| else | |
| echo "✅ 覆盖率检查通过" >> $GITHUB_STEP_SUMMARY | |
| fi | |
| build: | |
| name: 构建验证 | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| needs: test | |
| steps: | |
| - name: 检出代码 | |
| uses: actions/checkout@v4 | |
| - name: 设置 Go 环境 | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version: '1.25.12' | |
| cache: true | |
| - name: 构建验证 | |
| run: | | |
| # 只验证能否编译通过，不需要多平台构建 | |
| echo "🔨 验证 Linux/amd64 构建..." | |
| CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o /dev/null . | |
| echo "✅ 构建成功" |