copilot-cli-for-beginners

CI/CD 整合

📖 前置準備：請先完成第 07 章：整合實作後再閱讀本附錄。

⚠️ 本附錄適用於已有 CI/CD 流程的團隊。 如果你是 GitHub Actions 或 CI/CD 新手，請先從第 07 章 程式碼審查自動化章節的 pre-commit hook 簡易方案開始。

本附錄說明如何將 GitHub Copilot CLI 整合進你的 CI/CD 流程，讓 PR 自動進行程式碼審查。

---

GitHub Actions 工作流程

此工作流程會在 PR 開啟或更新時，自動審查變更的檔案：

# .github/workflows/copilot-review.yml
name: Copilot Review

on:
  pull_request:
    types: [opened, synchronize]

jobs:
  review:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0  # Needed to compare with main branch

      - name: Install Copilot CLI
        run: npm install -g @github/copilot

      - name: Review Changed Files
        env:
          GITHUB_TOKEN: $
        run: |
          # Get list of changed JS/TS files
          FILES=$(git diff --name-only origin/main...HEAD | grep -E '\.(js|ts|jsx|tsx)$' || true)
          
          if [ -z "$FILES" ]; then
            echo "No JavaScript/TypeScript files changed"
            exit 0
          fi
          
          echo "# Copilot Code Review" > review.md
          echo "" >> review.md
          
          for file in $FILES; do
            echo "Reviewing $file..."
            echo "## $file" >> review.md
            echo "" >> review.md
            
            # Use --silent to suppress progress output
            copilot --allow-all -p "Quick security and quality review of @$file. List only critical issues." --silent >> review.md 2>/dev/null || echo "Review skipped" >> review.md
            echo "" >> review.md
          done

      - name: Post Review Comment
        uses: actions/github-script@v7
        with:
          script: |
            const fs = require('fs');
            const review = fs.readFileSync('review.md', 'utf8');
            
            // Only post if there's meaningful content
            if (review.includes('CRITICAL') || review.includes('HIGH')) {
              github.rest.issues.createComment({
                issue_number: context.issue.number,
                owner: context.repo.owner,
                repo: context.repo.repo,
                body: review
              });
            } else {
              console.log('No critical issues found, skipping comment');
            }

---

設定選項

限縮審查範圍

你可以聚焦於特定類型的問題進行審查：

# 只做安全性審查
copilot --allow-all -p "Security review of @$file. Check for: SQL injection, XSS, hardcoded secrets, authentication issues." --silent

# 只做效能審查
copilot --allow-all -p "Performance review of @$file. Check for: N+1 queries, memory leaks, blocking operations." --silent

處理大型 PR

若 PR 涉及許多檔案，可考慮分批或限制數量：

# 只審查前 10 個檔案
FILES=$(git diff --name-only origin/main...HEAD | grep -E '\.(js|ts)$' | head -10)

# 或對每個檔案設置逾時
timeout 60 copilot --allow-all -p "Review @$file" --silent || echo "Review timed out"

團隊設定

為了讓團隊審查標準一致，可建立共用設定：

// .copilot/config.json (committed to repo)
{
  "model": "claude-sonnet-4.5",
  "permissions": {
    "allowedPaths": ["src/**/*", "tests/**/*"],
    "deniedPaths": [".env*", "secrets/**/*", "*.min.js"]
  }
}

---

進階方案：PR 審查機器人

若需更進階的審查流程，可考慮使用 GitHub Copilot 雲端 Agent：

# .github/workflows/copilot-agent-review.yml
name: Request Copilot Review

on:
  pull_request:
    types: [opened, ready_for_review]

jobs:
  request-review:
    runs-on: ubuntu-latest
    steps:
      - name: Request Copilot Review
        uses: actions/github-script@v7
        with:
          script: |
            await github.rest.pulls.requestReviewers({
              owner: context.repo.owner,
              repo: context.repo.repo,
              pull_number: context.issue.number,
              reviewers: ['copilot[bot]']
            });

---

CI/CD 整合最佳實踐

1. 使用 --silent 旗標 —— 隱藏進度輸出，讓日誌更乾淨
2. 設置逾時 —— 避免審查卡住導致流程阻塞
3. 檔案類型過濾 —— 只審查相關檔案（略過產生的程式碼、相依套件等）
4. 注意速率限制 —— 大型 PR 請分散審查，避免觸發限制
5. 優雅失敗 —— 審查失敗時不要阻擋合併，記錄錯誤並繼續流程

---

疑難排解

CI 出現 “Authentication failed”

請確認 workflow 權限設定正確：

permissions:
  contents: read
  pull-requests: write
  issues: write

審查逾時

請增加逾時時間或縮小審查範圍：

timeout 120 copilot --allow-all -p "Quick review of @$file - critical issues only" --silent

大檔案觸發 Token 限制

可略過超大的檔案：

if [ $(wc -l < "$file") -lt 500 ]; then
  copilot --allow-all -p "Review @$file" --silent
else
  echo "Skipping $file (too large)"
fi

---

← 回到第 07 章

返回附錄目錄

This site is open source. Improve this page.