Integrating AI into Your CI/CD Pipeline

# .github/workflows/ai-review.yml
name: AI Code Review
 
on:
  pull_request:
    types: [opened, synchronize]
 
jobs:
  ai-review:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      
      - name: Run AI Code Review
        uses: denchclaw/ai-review-action@v1
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          severity-to-fail: critical  # Only block on critical issues
          categories: security,logic,performance,coverage

- name: Test Gap Analysis
  run: |
    npm run test:coverage -- --json
    npx denchclaw-ci test-gaps \
      --coverage-report coverage/coverage-final.json \
      --output test-gap-report.md \
      --generate-stubs  # Creates stub test files for critical gaps
  
- name: Comment test gap report
  uses: actions/github-script@v7
  with:
    script: |
      const report = require('fs').readFileSync('test-gap-report.md', 'utf8');
      github.rest.issues.createComment({
        issue_number: context.issue.number,
        owner: context.repo.owner,
        repo: context.repo.repo,
        body: report
      });

- name: Performance Benchmark
  uses: denchclaw/benchmark-action@v1
  with:
    base-branch: main
    metrics: bundle-size,core-web-vitals,db-query-time
    fail-on-regression: true
    regression-thresholds: |
      bundle_size_increase: 10%
      lcp_increase: 20%
      ttfb_increase: 30%

# .github/workflows/changelog.yml
name: Update Changelog
 
on:
  pull_request:
    types: [closed]
    branches: [main]
 
jobs:
  changelog:
    if: github.event.pull_request.merged == true
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      
      - name: Generate changelog entry
        uses: denchclaw/changelog-action@v1
        with:
          pr-number: ${{ github.event.pull_request.number }}
          github-token: ${{ secrets.GITHUB_TOKEN }}
          changelog-file: CHANGELOG.md
          commit-changes: true

- name: Documentation sync check
  uses: denchclaw/doc-sync-action@v1
  with:
    github-token: ${{ secrets.GITHUB_TOKEN }}
    docs-paths: 'docs/,README.md,*.md'
    source-paths: 'src/'
    create-pr-for-updates: true  # Creates a separate docs PR if updates needed

# .github/workflows/canary.yml
name: Post-Deploy Canary
 
on:
  deployment_status:
    states: [success]
 
jobs:
  canary:
    if: github.event.deployment_status.environment == 'production'
    runs-on: ubuntu-latest
    steps:
      - name: Run Canary Monitoring
        uses: denchclaw/canary-action@v1
        with:
          monitoring-duration: 900  # 15 minutes
          error-rate-threshold: 1.0  # Fail if error rate > 1%
          performance-regression-threshold: 20  # Fail if LCP > 20% slower
          rollback-on-failure: true  # Automatic rollback
          github-token: ${{ secrets.GITHUB_TOKEN }}

# Install the DenchClaw CI tools
npm install -g @denchclaw/ci
 
# In your CI script:
 
# AI code review (outputs to PR or stdout)
denchclaw-ci review \
  --diff $(git diff origin/main..HEAD) \
  --severity-threshold high \
  --format github-comments
 
# Performance benchmark
denchclaw-ci benchmark \
  --base-ref origin/main \
  --current-ref HEAD \
  --metrics bundle-size,core-web-vitals \
  --fail-on-regression
 
# Test gap analysis
denchclaw-ci test-gaps \
  --coverage coverage/coverage-final.json \
  --threshold 80
 
# Canary monitoring
denchclaw-ci canary \
  --duration 900 \
  --env production \
  --webhook $SLACK_WEBHOOK

-- AI findings that blocked real bugs
SELECT 
  ai_finding_category,
  COUNT(*) as total_findings,
  COUNT(CASE WHEN was_accepted THEN 1 END) as accepted_findings,
  COUNT(CASE WHEN was_accepted AND subsequent_bug_reported THEN 1 END) as prevented_bugs,
  ROUND(
    COUNT(CASE WHEN was_accepted THEN 1 END)::FLOAT / COUNT(*) * 100, 
    1
  ) as acceptance_rate
FROM v_ai_review_findings
WHERE finding_date > CURRENT_DATE - INTERVAL 90 DAY
GROUP BY 1
ORDER BY prevented_bugs DESC;