ci: add workflows

Signed-off-by: Boris Glimcher <[email protected]>

.github/CODEOWNERS

@@ -0,0 +1 @@
+*       @opiproject/opi-maintainers

.github/commitlintrc.yml

@@ -0,0 +1,2 @@
+extends:
+  - "@commitlint/config-conventional"

.github/renovate.json

@@ -0,0 +1,16 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:base",
+    ":enablePreCommit"
+  ],
+  "schedule": [
+    "every weekend"
+  ],
+  "packageRules": [
+    {
+        "matchUpdateTypes": ["digest"],
+        "automerge": true
+    }
+  ]
+}

.github/workflows/codeql.yml

@@ -0,0 +1,13 @@
+name: CodeQL
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  call:
+    uses: opiproject/actions/.github/workflows/codeql.yml@main
+    secrets: inherit

.github/workflows/commitlint.yml

@@ -0,0 +1,16 @@
+name: Commitlint
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+permissions:
+  contents: read
+
+jobs:
+  call:
+    uses: opiproject/actions/.github/workflows/commitlint.yml@main
+    secrets: inherit

.github/workflows/docker-publish.yml

@@ -0,0 +1,15 @@
+---
+name: Docker
+
+on:
+  workflow_dispatch:
+  workflow_call:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  call:
+    uses: opiproject/actions/.github/workflows/docker-publish.yml@main
+    secrets: inherit

.github/workflows/go.yml

@@ -0,0 +1,13 @@
+name: Go
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  call:
+    uses: opiproject/actions/.github/workflows/go.yml@main
+    secrets: inherit

.github/workflows/linters.yml

@@ -0,0 +1,13 @@
+name: Linters
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  call:
+    uses: opiproject/actions/.github/workflows/linters.yml@main
+    secrets: inherit

.github/workflows/release-please.yml

@@ -0,0 +1,15 @@
+name: Release Please
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ "main" ]
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  call:
+    uses: opiproject/actions/.github/workflows/release-please.yml@main
+    secrets: inherit

.github/workflows/release.yaml

@@ -0,0 +1,11 @@
+name: Release
+
+on:
+  workflow_dispatch:
+  release:
+    types: [published]
+
+jobs:
+  release-docker:
+    uses: ./.github/workflows/docker-publish.yml
+    secrets: inherit

.github/workflows/scorecard.yml

@@ -0,0 +1,13 @@
+name: OpenSSF
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  call:
+    uses: opiproject/actions/.github/workflows/scorecard.yml@main
+    secrets: inherit

.github/workflows/update-copyright-years-in-license-file.yml

@@ -0,0 +1,11 @@
+name: Update copyright year(s) in license file
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 3 1 1 *'
+
+jobs:
+  copyright:
+    uses: opiproject/actions/.github/workflows/update-copyright-years-in-license-file.yml@main
+    secrets: inherit