CI/CD per Applicazioni Web

CI/CD per Applicazioni Web

CI/CD automatizza il percorso da code commit a produzione. Pipeline veloci e affidabili abilitano iterazione rapida e riducono rischio deployment.

Stage Pipeline

CI: Lint → Type-check → Unit test → Build → Integration test → Security scan → Docker build → Push registry. CD: Deploy staging → E2E test → Approve → Deploy production → Smoke test → Monitor. Separa pipeline CI e CD per chiarezza.

GitHub Actions

Workflow YAML in .github/workflows/. Trigger: push, pull_request, schedule, workflow_dispatch. Job su runner (ubuntu-latest, self-hosted). Actions: Unità riutilizzabili (actions/checkout, actions/setup-node, docker/build-push-action). Caching: actions/cache per node_modules, ~/.npm, Docker layer. Matrix: Test multiple versioni Node, OS. Environments: Protection rules, secrets.

GitLab CI

.gitlab-ci.yml. Stages: ordine definito. Rules: quando eseguire job. Cache: chiavata per branch/commit. Artifacts: Passa dati tra job. Services: Container per DB (postgres, redis). Auto DevOps: Pipeline template. Container Registry: Built-in. Pages: Hosting siti statici.

Strategia Testing

Unit: Veloci, isolate (Vitest, Jest). Integration: Test boundary (API, DB) - Testcontainers. E2E: Flussi utente completi (Playwright, Cypress). Contract: Schema API (Pact, Schemathesis). Visual: Screenshot diff (Chromatic, Percy). Performance: Lighthouse CI, k6. Mutation: Stryker.

Pattern Deployment

Blue/Green: Due ambienti prod, switch DNS. Canary: Rollout percentuale con metriche. Rolling: Default Kubernetes. Feature Flags: LaunchDarkly, Unleash, open-source (GrowthBook). Trunk-based development: Branch short-lived, main sempre deployable.

Ottimizzazione Pipeline

Parallelizza job indipendenti. Cache aggressivo (npm, Docker, risultati test). Fail fast: Lint/type-check prima. Self-hosted runner per velocità/costo. Monorepo: Solo progetti affected (Nx, Turborepo). Docker layer caching: BuildKit, --cache-from. Build incrementali: Turborepo, Nx.

Sicurezza in Pipeline

SAST: CodeQL, Semgrep, SonarQube. SCA: Dependabot, Renovate, Snyk, Trivy. Container scan: Trivy, Grype. Secrets: TruffleHog, GitLeaks. SBOM: Syft. Policy: OPA/Gatekeeper. Firma: Cosign. Attestazioni: SLSA.

GitOps

Infrastruttura dichiarativa. Git come source of truth. ArgoCD, Flux sincronizzano cluster a Git. Cambiamenti via PR. Sync automatico o approvazione manuale. Drift detection. Progressive delivery con Argo Rollouts.

Osservabilità in CI/CD

Metriche pipeline: Durata, success rate, MTTR. Deployment tracking: Change lead time, deployment frequency, change failure rate (metriche DORA). Dashboard: Grafana, Datadog. Notifiche: Slack, Teams, PagerDuty.