풀스택 개발자를 위한 CI/CD 10강 — 모노레포와 재사용 가능한 파이프라인

my-platform/
├── apps/
│   ├── web/           # Next.js 프론트엔드
│   └── api/           # 백엔드 API
├── packages/
│   ├── ui/            # 공유 UI 컴포넌트
│   ├── types/         # 공유 타입
│   └── config/        # ESLint, TS 설정 공유
├── package.json
├── pnpm-workspace.yaml
└── turbo.json

# pnpm-workspace.yaml
packages:
  - 'apps/*'
  - 'packages/*'

packages/types ──▶ packages/ui ──▶ apps/web
       │
       └──────────────────────────▶ apps/api

// turbo.json
{
  "$schema": "https://turbo.build/schema.json",
  "tasks": {
    "build": {
      "dependsOn": ["^build"],
      "outputs": [".next/**", "!.next/cache/**", "dist/**"]
    },
    "lint": {},
    "typecheck": { "dependsOn": ["^build"] },
    "test": { "dependsOn": ["^build"] }
  }
}

      - uses: actions/checkout@v4
        with:
          fetch-depth: 0          # 비교할 이력이 필요
      # ... pnpm 설치
      - run: pnpm turbo run lint typecheck test build --filter="...[origin/main]"

name: CI
 
on:
  pull_request:
  push:
    branches: [main]
 
permissions:
  contents: read
  pull-requests: read
 
jobs:
  changes:
    runs-on: ubuntu-latest
    outputs:
      web: ${{ steps.filter.outputs.web }}
      api: ${{ steps.filter.outputs.api }}
    steps:
      - uses: actions/checkout@v4
      - uses: dorny/paths-filter@v3
        id: filter
        with:
          filters: |
            shared: &shared
              - 'packages/types/**'
              - 'pnpm-lock.yaml'
            web:
              - *shared
              - 'apps/web/**'
              - 'packages/ui/**'
            api:
              - *shared
              - 'apps/api/**'
 
  web:
    needs: changes
    if: needs.changes.outputs.web == 'true'
    uses: ./.github/workflows/_node-app.yml
    with:
      app: web
 
  api:
    needs: changes
    if: needs.changes.outputs.api == 'true'
    uses: ./.github/workflows/_node-app.yml
    with:
      app: api
 
  ci-result:
    name: CI Result
    if: always()
    needs: [changes, web, api]
    runs-on: ubuntu-latest
    steps:
      - name: 결과 집계
        env:
          RESULTS: ${{ join(needs.*.result, ' ') }}
        run: |
          echo "job 결과: $RESULTS"
          for r in $RESULTS; do
            if [[ "$r" == "failure" || "$r" == "cancelled" ]]; then
              exit 1
            fi
          done

# .github/actions/setup/action.yml
name: Setup workspace
description: pnpm, Node.js 설치 후 의존성 설치
 
inputs:
  node-version-file:
    description: Node 버전 파일
    default: .nvmrc
 
runs:
  using: composite
  steps:
    - uses: pnpm/action-setup@v4
 
    - uses: actions/setup-node@v4
      with:
        node-version-file: ${{ inputs.node-version-file }}
        cache: pnpm
 
    - name: 의존성 설치
      shell: bash
      run: pnpm install --frozen-lockfile

    steps:
      - uses: actions/checkout@v4
      - uses: ./.github/actions/setup
      - run: pnpm turbo run test --filter=web

# .github/workflows/_node-app.yml
name: Node app pipeline
 
on:
  workflow_call:
    inputs:
      app:
        required: true
        type: string
      node-version-file:
        type: string
        default: .nvmrc
    outputs:
      digest:
        value: ${{ jobs.image.outputs.digest }}
 
permissions:
  contents: read
 
jobs:
  verify:
    runs-on: ubuntu-latest
    timeout-minutes: 15
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - uses: ./.github/actions/setup
      - run: pnpm turbo run lint typecheck test build --filter="${{ inputs.app }}..."
 
  image:
    needs: verify
    if: github.event_name == 'push'
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    outputs:
      digest: ${{ steps.build.outputs.digest }}
    steps:
      - uses: actions/checkout@v4
      - uses: docker/setup-buildx-action@v3
      - uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - id: build
        uses: docker/build-push-action@v6
        with:
          context: .
          file: apps/${{ inputs.app }}/Dockerfile
          push: true
          tags: ghcr.io/my-org/${{ inputs.app }}:${{ github.sha }}
          cache-from: type=gha,scope=${{ inputs.app }}
          cache-to: type=gha,mode=max,scope=${{ inputs.app }}

jobs:
  deploy:
    uses: my-org/platform-workflows/.github/workflows/deploy.yml@v2
    with:
      service: kpi-dashboard
      environment: production
    secrets: inherit

# 서비스 저장소: 이미지 빌드 후 배포 저장소에 이벤트 전송
- run: |
    gh api repos/my-org/deployments/dispatches \
      -f event_type=deploy \
      -f "client_payload[service]=web" \
      -f "client_payload[digest]=$DIGEST"
  env:
    GH_TOKEN: ${{ secrets.DEPLOY_REPO_TOKEN }}
    DIGEST: ${{ steps.build.outputs.digest }}

# 배포 저장소
on:
  repository_dispatch:
    types: [deploy]