贴吧 10 周落地 AI Code Review：评审覆盖率从 33% 拉到 84%，bug 密度降了 66%

# .gitlab-ci.yml
stages:
  - ai_cr
  - test
  - deploy

ai_code_review:
  stage: ai_cr
  image: your-registry/ai-cr-cli:latest   # 替换为你自己的 AI CR 工具镜像
  rules:
    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'  # 仅在 MR 时触发
  script:
    # 1. 拉取 MR 的变更文件列表
    - |
      CHANGED_FILES=$(git diff --name-only origin/$CI_MERGE_REQUEST_TARGET_BRANCH_NAME...$CI_COMMIT_SHA)
      echo "待审查文件: $CHANGED_FILES"

    # 2. 调用 AI CR 服务，输出评审结果为 JSON
    - |
      ai-cr-cli review \
        --files "$CHANGED_FILES" \
        --repo "$CI_PROJECT_PATH" \
        --mr-id "$CI_MERGE_REQUEST_IID" \
        --config ./ai-cr-config.json \
        --output ./cr-result.json

    # 3. 把评审结果推到 MR 评论区
    - |
      ai-cr-cli post-comment \
        --gitlab-url "$CI_SERVER_URL" \
        --token "$GITLAB_TOKEN_CR" \
        --project-id "$CI_PROJECT_ID" \
        --mr-iid "$CI_MERGE_REQUEST_IID" \
        --result ./cr-result.json

    # 4. 如果有高严重度问题，阻断合入
    - |
      HIGH_SEVERITY=$(python3 -c "
      import json
      r = json.load(open('./cr-result.json'))
      high = [i for i in r['issues'] if i['severity'] == 'high']
      print(len(high))
      ")
      if [ "$HIGH_SEVERITY" -gt 0 ]; then
        echo "发现 $HIGH_SEVERITY 个高严重度问题，请修复后再合入"
        exit 1
      fi
  artifacts:
    paths:
      - cr-result.json
    expire_in: 7 days

{
  "language": "go",
  "focus_areas": [
    "null_pointer_risk",
    "concurrency_safety",
    "sql_injection",
    "error_handling_gap",
    "resource_leak"
  ],
  "severity_threshold": "medium",
  "max_comments_per_mr": 15,
  "exclude_paths": [
    "vendor/**",
    "**/*_test.go",
    "docs/**"
  ],
  "custom_rules": [
    {
      "id": "tieba_no_raw_sql",
      "description": "禁止拼接原始 SQL，必须使用 ORM 或预编译语句",
      "severity": "high"
    }
  ]
}