AI in CI/CD Pipelines

# .github/workflows/ai-code-review.yml
name: AI Code Review

on:
  pull_request:
    types: [opened, synchronize]

permissions:
  contents: read
  pull-requests: write

jobs:
  ai-review:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: "20"

      - name: Install Claude Code
        run: npm install -g @anthropic-ai/claude-code

      - name: Run AI Review
        env:
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
        run: |
          # Get the diff against the base branch
          DIFF=$(git diff origin/${{ github.base_ref }}...HEAD)

          # Run Claude Code in print mode for review
          REVIEW=$(claude -p "Review this PR diff. Focus on:
          1. Bugs and logic errors
          2. Security vulnerabilities
          3. Missing error handling
          4. Performance concerns
          Only flag significant issues, not style nits.
          Format each issue as: **[SEVERITY]** file:line - description

          Diff:
          $DIFF")

          # Post review as a PR comment
          gh pr comment ${{ github.event.pull_request.number }}             --body "## AI Code Review

          $REVIEW

          ---
          *Automated review by Claude Code*"
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

# .github/workflows/build-failure-analysis.yml
name: Build Failure Analysis

on:
  workflow_run:
    workflows: ["CI"]
    types: [completed]

jobs:
  analyze-failure:
    if: ${{ github.event.workflow_run.conclusion == 'failure' }}
    runs-on: ubuntu-latest
    steps:
      - name: Get failed job logs
        id: logs
        run: |
          # Fetch the failed run's logs
          gh api repos/${{ github.repository }}/actions/runs/${{ github.event.workflow_run.id }}/logs             --jq '.jobs[] | select(.conclusion == "failure") | .steps[] | select(.conclusion == "failure") | .name + ": " + .log'             > failure_logs.txt
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Analyze with AI
        env:
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
        run: |
          LOGS=$(cat failure_logs.txt | head -200)
          ANALYSIS=$(claude -p "Analyze this CI build failure.
          Explain: (1) What failed, (2) Root cause,
          (3) How to fix it. Be specific and actionable.
          Logs: $LOGS")

          # Post analysis to the PR or Slack
          echo "$ANALYSIS"

# .github/workflows/changelog.yml
name: Generate Changelog

on:
  release:
    types: [created]

jobs:
  changelog:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Generate changelog
        env:
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
        run: |
          # Get commits since last release
          PREV_TAG=$(git describe --abbrev=0 --tags HEAD^ 2>/dev/null || echo "")
          if [ -n "$PREV_TAG" ]; then
            COMMITS=$(git log $PREV_TAG..HEAD --pretty=format:"%s (%h)")
          else
            COMMITS=$(git log --pretty=format:"%s (%h)" -50)
          fi

          CHANGELOG=$(claude -p "Generate a user-friendly changelog
          from these git commits. Group by: Features, Bug Fixes,
          Improvements, and Breaking Changes. Use clear, non-technical
          language where possible. Skip merge commits and CI changes.

          Commits:
          $COMMITS")

          # Update the release body
          gh release edit ${{ github.event.release.tag_name }}             --notes "$CHANGELOG"
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

# .github/workflows/auto-label.yml
name: Auto Label PR

on:
  pull_request:
    types: [opened]

jobs:
  label:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Analyze and label
        env:
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          DIFF_STAT=$(git diff --stat origin/${{ github.base_ref }}...HEAD)
          TITLE="${{ github.event.pull_request.title }}"

          LABELS=$(claude -p "Based on this PR title and changed files,
          suggest labels from this list: feature, bugfix, refactor,
          docs, test, ci, deps, breaking-change, performance.
          Return only comma-separated labels, nothing else.

          Title: $TITLE
          Files changed: $DIFF_STAT")

          # Apply labels
          for LABEL in $(echo $LABELS | tr ',' ' '); do
            gh pr edit ${{ github.event.pull_request.number }}               --add-label "$LABEL" 2>/dev/null || true
          done