I need a rock-solid CI/CD pipeline for our finance tracker. Here's what I want to happen:
 
For every pull request:
 
- Run the full test suite (unit, integration, E2E)
- Check TypeScript compilation
- Verify code formatting with Prettier
- Run ESLint for code quality issues
- Build the production bundle successfully
- Run security audits on dependencies
- Check for any breaking changes
 
For main branch merges:
 
- Everything from PR checks
- Deploy to a staging environment automatically
- Run smoke tests against staging
- Send a Slack notification about deployment status
 
For tagged releases:
 
- Deploy to production with zero downtime
- Run post-deployment health checks
- Update monitoring dashboards
 
Make this bulletproof - I never want broken code to reach production.

# .github/workflows/ci.yml
name: CI/CD Pipeline
 
on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
 
jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: 'npm'
 
      - run: npm ci
      - run: npm run type-check
      - run: npm run lint
      - run: npm run format:check
      - run: npm test -- --coverage
      - run: npm run build
 
  e2e:
    needs: test
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: npm ci
      - run: npx playwright install
      - run: npm run test:e2e
 
  deploy-staging:
    needs: [test, e2e]
    if: github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: npm ci
      - run: npm run deploy:staging

{
  "scripts": {
    "type-check": "tsc --noEmit",
    "lint": "eslint . --ext .ts,.tsx",
    "format:check": "prettier --check .",
    "test": "jest",
    "test:e2e": "playwright test",
    "deploy:staging": "vercel --prod",
    "deploy:production": "vercel --prod --env production"
  }
}

git tag v1.2.0
git push origin v1.2.0

- uses: actions/cache@v4
  with:
    path: ~/.npm
    key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}

jobs:
  test:
    strategy:
      matrix:
        shard: [1, 2, 3, 4]
    steps:
      - run: npm test -- --shard=${{ matrix.shard }}/4

- uses: actions/upload-artifact@v4
  with:
    name: build
    path: dist/