Advanced CI/CD Pipeline Optimization Techniques Using GitHub Actions

jobs:
 CI-Test:
 strategy:
 matrix:
 os: [ubuntu-latest, windows-latest, macos-latest]
 node-version: [14.x, 16.x, 18.x]
 runs-on: ${{ matrix.os }}
 steps:
 - uses: actions/checkout@v3
 - name: Use Node.js ${{ matrix.node-version }}
 uses: actions/setup-node@v3
 with:
 node-version: ${{ matrix.node-version }}
 - run: npm ci
 - run: npm test

- uses: actions/cache@v3
 with:
 path: ~/.npm
 key: ${{ runner.OS }}-node-${{ hashFiles('**/package-lock.json') }}
 restore-keys: |
 ${{ runner.OS }}-node-

name: Docker Build and Publish Workflow

on:
 workflow_call:
 inputs:
 dockerfile-path:
 description: 'Path to Dockerfile'
 required: true
 image-name:
 description: 'Name of the Docker image'
 required: true
 image-tag:
 description: 'Image Tag'
 required: true
 secrets:
 REGISTRY_URL:
 description: 'Registry URL'
 required: true
 REGISTRY_USERNAME:
 description: 'Registry username'
 required: true
 REGISTRY_PASSWORD:
 description: 'Registry password'
 required: true

jobs:
 build-and-publish:
 runs-on: ubuntu-latest

 steps:
 - name: Checkout code
 uses: actions/checkout@v3

 - name: Set up Docker Buildx
 uses: docker/setup-buildx-action@v2

 - name: Log in to Registry
 run: docker login "${{ secrets.REGISTRY_URL }}" -u "${{ secrets.REGISTRY_USERNAME }}" --password "${{ secrets.REGISTRY_PASSWORD }}"

 - name: Build Docker image
 run: docker build -t ${{ inputs.image-name }}:${{ inputs.image-tag }} -f ${{ inputs.dockerfile-path }} .

 - name: Push Docker image
 run: docker push ${{ inputs.image-name }}:${{ inputs.image-tag }}

name: Docker Build and Publish Workflow

on:
 push:
 branches:
 - main

jobs:
 build_publish_image:
 uses: repo/.github/workflows/reusable-docker-build-publish.yml@main
 with:
 dockerfile-path: './Dockerfile'
 image-name: 'my-org/my-app'
 image-tag: 'latest'
 secrets:
 REGISTRY_URL: ${{ secrets.REGISTRY_URL }} # Make sure this matches the secret in your reusable workflow
 REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }} # Same here
 REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }} # And here

jobs:
 Branches:
 if: github.ref == 'refs/heads/main' || github.ref == 'refs/heads/test'
 runs-on: ubuntu-latest
 steps:
 - run: npm test

// Check commit messages with words "docs"
 CommitMessage:
 if: "!contains(github.event.head_commit.message, 'docs')"
 runs-on: ubuntu-latest
 steps:
 - run: echo "This is only executed if the commit message does not contain word 'docs'" 

// Run the job only if there is a push to Main branch
 Deploy:
 if: github.event_name == 'push' && github.ref == 'refs/heads/main'
 runs-on: ubuntu-latest
 steps:
 - run: echo "Deploying to production"

concurrency:
 group: ${{ github.ref }}
 cancel-in-progress: true