Kapston 2: CI — lint, test, xavfsizlik gate, build va push

Bu dars Premium obuna talab qiladi

hn-notes uchun to'liq CI pipeline: quality gate tushunchasi va chiqish kodlari; lint (actionlint, sh -n/shellcheck, compileall) → test (venv + oflayn wheelhouse, pytest) va security (gitleaks --log-opts, tor .gitleaks.toml allowlist, bandit -ll, hadolint) → build (wheels, OCI label'lar, smoke test, --password-stdin, sha-<7> va SemVer teg, push). needs DAG, job darajasidagi if: va startsWith; gate'ni ataylab zaif commit bilan sinash: run qizil, build skipped. Lab: lokal CI (hn-ci) va ichki Docker

Ushbu dars DevOps muhandisi yo'li kursiga tegishli.