GitHub Actions vs Jenkins: Сравнение инструментов CI/CD

on:
  push:
    branches:
      - main
    paths:
      - '**.js'

steps:
  - uses: actions/checkout@v3
  - name: Set up Node.js
    uses: actions/setup-node@v3
    with:
      node-version: '16'
  - name: Install dependencies
    run: npm ci
  - name: Deploy to Heroku
    uses: akhileshns/heroku-deploy@v3.12.12
    with:
      heroku_api_key: ${{ secrets.HEROKU_API_KEY }}
      heroku_app_name: "my-amazing-app"

jobs:
  test:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os: [ubuntu-latest, windows-latest, macos-latest]
        node: [14, 16, 18]
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-node@v3
        with:
          node-version: ${{ matrix.node }}
      - run: npm test

name: CI Pipeline
 
on:
  push:
    branches: [ main ]
 
jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Run tests
        run: |
          npm install
          npm test

steps:
  - name: Complex build script
    run: |
      echo "Starting build process"
      mkdir -p build
      cd build
      cmake ..
      make
      make test

steps:
  - name: Build for production
    if: github.ref == 'refs/heads/main'
    run: npm run build:prod
  
  - name: Build for staging
    if: github.ref == 'refs/heads/develop'
    run: npm run build:staging

jobs:
  job1:
    uses: ./.github/workflows/reusable.yml
    with:
      parameter1: value1
  
  job2:
    uses: ./.github/workflows/reusable.yml
    with:
      parameter1: value2

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - run: npm test
  
  build:
    needs: test
    runs-on: ubuntu-latest
    steps:
      - run: npm build

strategy:
  matrix:
    node-version: [12, 14, 16]
    os: [ubuntu-latest, windows-latest]
    exclude:
      - os: windows-latest
        node-version: 12

environment:
  DEBUG: 'yes'  # Будет строкой "yes"
  VERBOSE: yes  # Будет булевым true

agent:
  enabled: true
  image: "jenkins/inbound-agent"
  tag: "4.11.2-4"
  workingDir: "/home/jenkins/agent"
  customJenkinsLabels: ["docker", "linux"]
  resources:
    requests:
      cpu: "500m"
      memory: "512Mi"
    limits:
      cpu: "1"
      memory: "1Gi"

jobs:
  test:
    strategy:
      matrix:
        platform: [ubuntu-latest, windows-latest]
        node: [14, 16, 18]
    runs-on: ${{ matrix.platform }}
    # ...

uses: actions/cache@v3
  with:
    path: ~/.m2/repository
    key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}

jobs:
deploy:
  runs-on: ubuntu-latest
  steps:
    - uses: actions/checkout@v3
    - name: Configure AWS credentials
      uses: aws-actions/configure-aws-credentials@v1
      with:
        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
        aws-region: us-east-1
    - name: Deploy to S3
      run: aws s3 sync ./build s3://my-app-bucket/

name: Order Service CI/CD
 
on:
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]
 
jobs:
  build-and-test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Set up Node.js
        uses: actions/setup-node@v3
        with:
          node-version: '16'
          cache: 'npm'
      - run: npm ci
      - run: npm run lint
      - run: npm test
      - run: npm run build
      
  deploy:
    needs: build-and-test
    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v2
      - name: Build and push
        uses: docker/build-push-action@v3
        with:
          context: .
          push: true
          tags: myregistry.com/order-service:latest
      - name: Deploy to Kubernetes
        run: |
          kubectl apply -f k8s/deployment.yaml

# Переиспользуемый процесс в .github/workflows/reusable-nodejs-workflow.yml
name: Reusable Node.js Workflow
on:
  workflow_call:
    inputs:
      node-version:
        required: true
        type: string
 
jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Setup Node.js
        uses: actions/setup-node@v3
        with:
          node-version: ${{ inputs.node-version }}
      # Общие шаги для всех Node.js сервисов

name: Frontend CI
 
on:
  push:
    paths:
      - 'packages/frontend/[B]'
      - 'packages/shared/[/B]'
  pull_request:
    paths:
      - 'packages/frontend/[B]'
      - 'packages/shared/[/B]'
 
jobs:
  build:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: packages/frontend
    steps:
      - uses: actions/checkout@v3
      # Шаги сборки фронтенда

jobs:
  shared:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: packages/shared
    steps:
      # Сборка общих компонентов
  
  frontend:
    needs: shared
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: packages/frontend
    steps:
      # Сборка фронтенда

name: Mobile App CI
 
on:
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]
 
jobs:
  build-android:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Set up JDK
        uses: actions/setup-java@v3
        with:
          distribution: 'temurin'
          java-version: '11'
      - name: Build APK
        run: ./gradlew assembleRelease
      - name: Upload APK
        uses: actions/upload-artifact@v3
        with:
          name: app-release
          path: app/build/outputs/apk/release/app-release.apk
          
  build-ios:
    runs-on: macos-latest
    steps:
      - uses: actions/checkout@v3
      - name: Install dependencies
        run: |
          cd ios
          pod install
      - name: Build iOS
        run: |
          xcodebuild -workspace ios/MyApp.xcworkspace -scheme MyApp \
          -configuration Release -archivePath ios/build/MyApp.xcarchive \
          archive

name: Integration Tests
 
on: [push, pull_request]
 
jobs:
  test:
    runs-on: ubuntu-latest
    
    services:
      postgres:
        image: postgres:13
        env:
          POSTGRES_PASSWORD: postgres
          POSTGRES_USER: postgres
          POSTGRES_DB: testdb
        ports:
          - 5432:5432
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
          
      redis:
        image: redis:6
        ports:
          - 6379:6379
          
      rabbitmq:
        image: rabbitmq:3-management
        ports:
          - 5672:5672
          - 15672:15672
    
    steps:
      - uses: actions/checkout@v3
      - name: Set up Python
        uses: actions/setup-python@v4
        with:
          python-version: '3.9'
      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install -r requirements.txt
      - name: Run tests
        env:
          DATABASE_URL: postgresql://postgres:postgres@localhost:5432/testdb
          REDIS_URL: redis://localhost:6379/0
          RABBITMQ_URL: amqp://guest:guest@localhost:5672/%2F
        run: pytest

name: Security Pipeline
 
on:
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]
  schedule:
    - cron: '0 2 * * 1'  # Еженедельный анализ
 
jobs:
  security-scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: 0
      
      - name: Find secrets
        uses: gitleaks/gitleaks-action@v2
        
      - name: Run SAST analysis
        uses: github/codeql-action/analyze@v2
        with:
          languages: java, javascript
          
      - name: Dependency check
        uses: aquasecurity/trivy-action@master
        with:
          scan-type: 'fs'
          format: 'table'
          exit-code: '1'
          ignore-unfixed: true
          severity: 'CRITICAL,HIGH'
          
      - name: Container scan
        if: success()
        uses: aquasecurity/trivy-action@master
        with:
          image-ref: 'myapp:latest'
          format: 'sarif'
          output: 'trivy-results.sarif'
          
      - name: Upload scan results
        uses: github/codeql-action/upload-sarif@v2
        with:
          sarif_file: trivy-results.sarif

name: Release Management
 
on:
  workflow_dispatch:
    inputs:
      version:
        description: 'Release version'
        required: true
      environment:
        description: 'Target environment'
        required: true
        default: 'staging'
        type: choice
        options:
          - staging
          - production
 
jobs:
  prepare-release:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Update version
        run: |
          echo "VERSION=${{ github.event.inputs.version }}" > .env
          git config user.name github-actions
          git config user.email [email]github-actions@github.com[/email]
          git add .env
          git commit -m "Bump version to ${{ github.event.inputs.version }}"
          git tag v${{ github.event.inputs.version }}
          git push
          git push --tags
 
  deploy-staging:
    needs: prepare-release
    if: github.event.inputs.environment == 'staging'
    runs-on: ubuntu-latest
    environment: staging
    steps:
      - uses: actions/checkout@v3
      - name: Deploy to staging
        run: ./deploy.sh staging
 
  deploy-production:
    needs: prepare-release
    if: github.event.inputs.environment == 'production'
    runs-on: ubuntu-latest
    environment: production
    steps:
      - uses: actions/checkout@v3
      - name: Deploy to production
        run: ./deploy.sh production

# Пример сконвертированного из Jenkins пайплайна
name: Production Deploy
 
on:
  push:
    branches:
      - main
      
jobs:
  verify:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Verify Branch Protection
        uses: shopify/branch-protection-check@v1
        
  build:
    needs: verify
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Custom Build Step
        uses: shopify/custom-build-action@v2
        with:
          cache-key: ${{ github.sha }}

name: Trigger Jenkins Build
 
on:
  pull_request:
    types: [opened, synchronize]
    
jobs:
  quick-tests:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Run Linting
        run: npm run lint
        
  trigger-jenkins:
    needs: quick-tests
    runs-on: ubuntu-latest
    steps:
      - name: Trigger Jenkins Job
        uses: appleboy/jenkins-action@master
        with:
          url: "https://jenkins.example.com"
          user: "jenkins"
          token: ${{ secrets.JENKINS_TOKEN }}
          job: "fullTestSuite"