在 GitLab Runner 中注册 OpenClaw runner

OpenClaw 与 GitLab 的集成主要通过以下方式实现：

CI/CD 流水线集成

配置 .gitlab-ci.yml

stages:
  - claw-test
  - claw-security
claw_tests:
  stage: claw-test
  image: openclaw/claw-runner:latest
  script:
    - claw run tests --project $CI_PROJECT_DIR
  artifacts:
    reports:
      junit: reports/claw-report.xml
security_scan:
  stage: claw-security
  image: openclaw/security-scanner:latest
  script:
    - claw scan security --output gl-sast.json
  artifacts:
    reports:
      sast: gl-sast.json

OpenClaw Runner 注册

  --url https://gitlab.example.com \
  --registration-token $GITLAB_TOKEN \
  --executor docker \
  --docker-image openclaw/claw-runner:latest \
  --description "OpenClaw CI Runner"

Webhook 集成

GitLab → OpenClaw 事件触发

# 在 GitLab 项目中配置 Webhook
Settings → Webhooks → Add new webhook:
URL: https://openclaw-server/api/v1/gitlab/webhook
Trigger events:
- Push events
- Merge request events
- Pipeline events
Secret token: $OPENCLAW_WEBHOOK_SECRET

OpenClaw 配置文件示例

# .claw/config.yaml
integrations:
  gitlab:
    enabled: true
    base_url: https://gitlab.example.com
    api_token: ${GITLAB_API_TOKEN}
    project_id: ${CI_PROJECT_ID}
    # MR 自动审查
    mr_review:
      enabled: true
      auto_assign: true
      required_checks:
        - security_scan
        - code_quality
    # 流水线集成
    pipeline:
      test_reports: true
      coverage_reports: true
      artifacts:
        path: "reports/"
    # Issue 同步
    issues:
      sync: true
      labels:
        - claw-bug
        - claw-enhancement

GitLab 变量配置

在 GitLab CI/CD 变量中设置：

# Project → Settings → CI/CD → Variables
OPENCLAW_API_KEY
OPENCLAW_PROJECT_ID
GITLAB_API_TOKEN

Merge Request 集成

MR 模板添加 OpenClaw 检查

## OpenClaw 检查清单
- [ ] 代码质量扫描通过
- [ ] 安全扫描无高危漏洞
- [ ] 测试覆盖率 ≥ 80%
- [ ] 符合编码规范

API 集成示例

# Python 脚本示例
import requests
from gitlab import Gitlab
class OpenClawGitlabIntegration:
    def __init__(self, gitlab_url, gitlab_token, openclaw_url, openclaw_token):
        self.gitlab = Gitlab(gitlab_url, private_token=gitlab_token)
        self.openclaw_url = openclaw_url
        self.openclaw_token = openclaw_token
    def trigger_claw_scan(self, project_id, branch):
        """触发 OpenClaw 扫描"""
        headers = {'Authorization': f'Bearer {self.openclaw_token}'}
        data = {
            'project_id': project_id,
            'branch': branch,
            'scan_type': 'full'
        }
        response = requests.post(
            f'{self.openclaw_url}/api/v1/scan',
            json=data,
            headers=headers
        )
        return response.json()

Docker Compose 集成

# docker-compose.gitlab.yml
version: '3'
services:
  openclaw-gitlab-agent:
    image: openclaw/gitlab-agent:latest
    environment:
      - GITLAB_URL=https://gitlab.example.com
      - GITLAB_TOKEN=${GITLAB_TOKEN}
      - OPENCLAW_URL=http://openclaw-server:8080
      - OPENCLAW_TOKEN=${OPENCLAW_TOKEN}
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock

最佳实践建议

1. 权限管理

   • 使用 Project Access Token
   • 设置最小必要权限
   • 定期轮换密钥

2. 性能优化

   # .gitlab-ci.yml 优化
   cache:
     paths:
       - .claw/cache/
       - node_modules/
   variables:
     CLAW_CACHE_DIR: "$CI_PROJECT_DIR/.claw/cache"

3. 错误处理

   • 设置重试机制
   • 配置失败通知
   • 日志集中收集

监控和告警

# 在 GitLab 中设置监控
monitoring:
  prometheus:
    enabled: true
    metrics_path: /metrics
    ports:
      - 9090
  alerts:
    - name: "OpenClaw 扫描失败"
      condition: "claw_failures > 0"
      channels:
        - slack
        - email

这样的集成可以实现：

• 自动化代码审查
• 安全漏洞扫描
• 质量门禁
• 实时反馈到 Merge Request
• 与现有 GitLab 流程无缝衔接

需要根据具体 OpenClaw 版本和 GitLab 版本进行适当调整。

标签： GitLab Runner OpenClaw runner