ci-cd-and-automation

Create a workflow file at .github/workflows/ci.yml that triggers on pull requests and pushes to main. Add jobs for lint, type check with tsc --noEmit, tests, build, and npm audit, using actions/setup-node with dependency caching.

Define a postgres service container in the workflow job with health checks, then run migrations and integration tests against it using a DATABASE_URL environment variable. Store credentials in GitHub Secrets rather than hardcoding them.

A complete pipeline runs lint, type checking, unit tests, build, integration tests, optional E2E tests, security audit, and bundle size checks. No gate should be skippable, and branch protection should block merges when any check fails.

Slow pipelines usually lack dependency caching and run jobs sequentially. Apply caching via setup-node, split lint, typecheck, and test into parallel jobs, use path filters to skip unrelated work, and shard large test suites across runners.

Use feature flags when you want to merge incomplete or risky features to main without releasing them. Flags let you canary releases to a percentage of users, roll back without redeploying, and run A/B tests, but should be removed after full rollout.

Fix the flakiness rather than re-running or disabling the test, since flaky tests mask real bugs and erode trust in the pipeline. Investigate timing dependencies, shared state, and external service calls as common root causes.