CI/CD Pipeline Builder

Detected: Python 3.11, poetry (pyproject.toml), FastAPI, Docker, AWS ECS

# .gitlab-ci.yml
stages: [lint, test, build, deploy]

variables:
  PIP_CACHE_DIR: "$CI_PROJECT_DIR/.cache/pip"

.python-cache: &python-cache
  cache:
    key:
      files: [poetry.lock]
    paths: [.cache/pip, .venv/]

lint:
  stage: lint
  image: python:3.11-slim
  <<: *python-cache
  script:
    - pip install ruff
    - ruff check . && ruff format --check .

test:
  stage: test
  image: python:3.11-slim
  services: [postgres:15-alpine]
  variables:
    POSTGRES_DB: testdb
    POSTGRES_USER: postgres
    POSTGRES_PASSWORD: postgres
    DATABASE_URL: postgresql://postgres:postgres@postgres/testdb
  <<: *python-cache
  script:
    - pip install poetry && poetry install --no-root
    - poetry run pytest --cov=app --cov-report=xml -x
  coverage: '/TOTAL.*\s+(\d+%)$/'
  artifacts:
    reports:
      coverage_report: {coverage_format: cobertura, path: coverage.xml}

build:
  stage: build
  image: docker:24
  services: [docker:24-dind]
  only: [main]
  script:
    - docker build -t $ECR_REPO:$CI_COMMIT_SHA .
    - aws ecr get-login-password | docker login --username AWS --password-stdin $ECR_REPO
    - docker push $ECR_REPO:$CI_COMMIT_SHA

deploy-production:
  stage: deploy
  only: [main]
  when: manual
  script:
    - aws ecs update-service --cluster prod --service api --force-new-deployment

Key differences from GitHub Actions: stages declared explicitly; cache uses key.files instead of hashFiles(); when: manual replaces environment protection rules. Required CI variables: ECR_REPO, AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY.

Split matrix strategy — fast feedback on PRs, full matrix only on main:

# .github/workflows/ci.yml
jobs:
  # Runs on every PR — fast feedback (~2 min)
  test-primary:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with: {node-version: 20, cache: npm}
      - run: npm ci
      - run: npm test

  # Full matrix — runs only on push to main (~3 min wall clock, parallel)
  test-matrix:
    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
    strategy:
      matrix:
        node: [18, 20, 22]
        os: [ubuntu-latest, windows-latest]
      fail-fast: false
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: ${{ matrix.node }}
          cache: npm
      - run: npm ci
      - run: npm test

Result:

• PRs: 1 job, ~2 min
• Main branch: 6 jobs in parallel, ~3 min wall clock
• No 15-minute PR cycles

For the Windows path issues: use path.join() everywhere and avoid hardcoded / separators. The matrix will surface failures on Windows automatically, giving you a regression test for every future PR via the main-branch run.