如何为Golang项目配置CI/CD环境 GitHub Actions集成

.github/workflows

main.yml

name: Go CI/CD Pipeline

on:
  push:
    branches:
      - main
      - develop
  pull_request:
    branches:
      - main
      - develop

jobs:
  build-and-test:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up Go
        uses: actions/setup-go@v5
        with:
          go-version: '1.22' # 确保使用项目兼容的Go版本

      - name: Go Cache
        uses: actions/cache@v4
        with:
          path: |
            ~/go/pkg/mod
            ~/.cache/go-build
          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
          restore-keys: |
            ${{ runner.os }}-go-

      - name: Download Go modules
        run: go mod download

      - name: Run tests
        run: go test -v ./...

      - name: Build application
        run: go build -v -o myapp ./cmd/myapp # 假设主应用入口在cmd/myapp

      # 示例：一个简单的部署步骤，比如构建Docker镜像
      - name: Build Docker image
        # 仅在main分支push时执行此步骤
        if: github.ref == 'refs/heads/main'
        run: |
          docker build -t your-docker-hub-user/myapp:latest .
          # echo "${{ secrets.DOCKER_HUB_TOKEN }}" | docker login -u ${{ secrets.DOCKER_HUB_USERNAME }} --password-stdin
          # docker push your-docker-hub-user/myapp:latest

      # 部署到特定环境的示例（需要配置相应的Secrets）
      # - name: Deploy to Staging
      #   if: github.ref == 'refs/heads/develop'
      #   run: |
      #     # 这里可以是SSH到服务器执行部署脚本，或者调用云服务CLI
      #     echo "Deploying to staging environment..."
      #     # ssh -i ~/.ssh/id_rsa user@your-staging-server "sudo systemctl restart myapp"

  # 更多Job可以根据需求添加，比如代码质量检查、安全扫描等
  # lint:
  #   runs-on: ubuntu-latest
  #   steps:
  #     - name: Checkout code
  #       uses: actions/checkout@v4
  #     - name: Set up Go
  #       uses: actions/setup-go@v5
  #       with:
  #         go-version: '1.22'
  #     - name: Run golangci-lint
  #       uses: golangci/golangci-lint-action@v3
  #       with:
  #         version: v1.55

golangci-lint

actions/cache

~/go/pkg/mod

~/.cache/go-build

go.sum

go mod download

runs-on

ubuntu-latest

build-and-test

lint

if

main

pull_request

golang:1.22-alpine

alpine

scratch

# 第一阶段：构建应用
FROM golang:1.22-alpine AS builder

WORKDIR /app

COPY go.mod go.sum ./
RUN go mod download

COPY . .

# 编译应用，禁用CGO以确保静态链接，减少运行时依赖
RUN CGO_ENABLED=0 GOOS=linux go build -a -installsuffix nocgo -o myapp ./cmd/myapp

# 第二阶段：构建最终的轻量级镜像
FROM alpine:latest

WORKDIR /root/

# 从构建阶段复制编译好的二进制文件
COPY --from=builder /app/myapp .

EXPOSE 8080 # 假设你的应用监听8080端口

CMD ["./myapp"]

docker build

docker push

docker/build-push-action

# ... (前面是Go构建和测试的步骤)

  build-and-push-docker-image:
    needs: build-and-test # 确保在构建测试通过后才执行
    runs-on: ubuntu-latest
    if: github.ref == 'refs/heads/main' # 只在main分支合并时构建并推送镜像
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to Docker Hub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKER_HUB_USERNAME }}
          password: ${{ secrets.DOCKER_HUB_TOKEN }}

      - name: Build and push Docker image
        uses: docker/build-push-action@v5
        with:
          context: .
          push: true
          tags: your-docker-hub-user/myapp:latest,your-docker-hub-user/myapp:${{ github.sha }}
          cache-from: type=gha
          cache-to: type=gha,mode=max