Tarik Moussa
2ae14a51e4
The Jetson Orin Nano (JetPack 7.2, Ollama on GPU) is live, so ci-ai runs fully self-hosted: no Anthropic key, no cloud, no per-PR cost. AI_PROVIDER=ollama, AI_BASE_URL=http://192.168.178.103:11434/v1. The Pi runner reaches it LAN-direct (SNAT to .48, allowed by the Jetson UFW). Removed the dead ANTHROPIC_API_KEY secret declarations. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
46 lines
1.6 KiB
YAML
46 lines
1.6 KiB
YAML
# GLOBALER CI-AI-Aufruf — das EINZIGE, was ein Ziel-Repo braucht.
|
|
# Kopie nach: <ziel-repo>/.gitea/workflows/ci-ai.yml
|
|
#
|
|
# Holt die komplette Logik zentral aus user2595/ci-ai (reusable workflows) — keine
|
|
# Skripte/Workflows ins Repo kopieren. Update der Logik passiert einmal in ci-ai.
|
|
#
|
|
# Features:
|
|
# - security : Gitleaks + Trivy, hart blockierend (push/PR)
|
|
# - review : KI-PR-Review + Summary (PR)
|
|
# - commands : Slash-Commands im Kommentar — `/gen-tests`, `/summarize`
|
|
#
|
|
# Voraussetzungen (einmalig zentral eingerichtet):
|
|
# 1. Runner instanzweit registriert (Label `eulernest`)
|
|
# 2. anonymer Clone für public Repos erlaubt
|
|
# 3. KI-Backend = Jetson-Ollama (LAN, self-hosted). Kein Secret nötig; die
|
|
# Jetson-UFW lässt den Pi-Runner (.48) an Port 11434. Modell: coder.
|
|
# 4. für „hart blockieren": den `security`-Check in der Branch-Protection
|
|
# als required markieren
|
|
name: CI-AI
|
|
|
|
on:
|
|
pull_request:
|
|
push:
|
|
branches: [main, master]
|
|
issue_comment:
|
|
types: [created]
|
|
|
|
jobs:
|
|
security:
|
|
if: github.event_name != 'issue_comment'
|
|
uses: user2595/ci-ai/.gitea/workflows/reusable-security.yml@main
|
|
secrets: inherit
|
|
|
|
review:
|
|
if: github.event_name == 'pull_request'
|
|
uses: user2595/ci-ai/.gitea/workflows/reusable-ai-review.yml@main
|
|
secrets: inherit
|
|
|
|
commands:
|
|
if: >-
|
|
github.event_name == 'issue_comment' &&
|
|
(startsWith(github.event.comment.body, '/gen-tests') ||
|
|
startsWith(github.event.comment.body, '/summarize'))
|
|
uses: user2595/ci-ai/.gitea/workflows/reusable-commands.yml@main
|
|
secrets: inherit
|