diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 0000000..97ec8f7
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1 @@
+*       @opiproject/opi-maintainers
diff --git a/.github/commitlintrc.yml b/.github/commitlintrc.yml
new file mode 100644
index 0000000..9cb74a7
--- /dev/null
+++ b/.github/commitlintrc.yml
@@ -0,0 +1,2 @@
+extends:
+  - "@commitlint/config-conventional"
diff --git a/.github/renovate.json b/.github/renovate.json
new file mode 100644
index 0000000..cbc15e8
--- /dev/null
+++ b/.github/renovate.json
@@ -0,0 +1,16 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:base",
+    ":enablePreCommit"
+  ],
+  "schedule": [
+    "every weekend"
+  ],
+  "packageRules": [
+    {
+        "matchUpdateTypes": ["digest"],
+        "automerge": true
+    }
+  ]
+}
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
new file mode 100644
index 0000000..ca42ab0
--- /dev/null
+++ b/.github/workflows/codeql.yml
@@ -0,0 +1,13 @@
+name: CodeQL
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  call:
+    uses: opiproject/actions/.github/workflows/codeql.yml@main
+    secrets: inherit
diff --git a/.github/workflows/commitlint.yml b/.github/workflows/commitlint.yml
new file mode 100644
index 0000000..c697da1
--- /dev/null
+++ b/.github/workflows/commitlint.yml
@@ -0,0 +1,16 @@
+name: Commitlint
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+permissions:
+  contents: read
+
+jobs:
+  call:
+    uses: opiproject/actions/.github/workflows/commitlint.yml@main
+    secrets: inherit
diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
new file mode 100644
index 0000000..86f853b
--- /dev/null
+++ b/.github/workflows/docker-publish.yml
@@ -0,0 +1,15 @@
+---
+name: Docker
+
+on:
+  workflow_dispatch:
+  workflow_call:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  call:
+    uses: opiproject/actions/.github/workflows/docker-publish.yml@main
+    secrets: inherit
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
new file mode 100644
index 0000000..c8390c0
--- /dev/null
+++ b/.github/workflows/go.yml
@@ -0,0 +1,13 @@
+name: Go
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  call:
+    uses: opiproject/actions/.github/workflows/go.yml@main
+    secrets: inherit
diff --git a/.github/workflows/linters.yml b/.github/workflows/linters.yml
new file mode 100644
index 0000000..8ad6421
--- /dev/null
+++ b/.github/workflows/linters.yml
@@ -0,0 +1,13 @@
+name: Linters
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  call:
+    uses: opiproject/actions/.github/workflows/linters.yml@main
+    secrets: inherit
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
new file mode 100644
index 0000000..e80411d
--- /dev/null
+++ b/.github/workflows/release-please.yml
@@ -0,0 +1,15 @@
+name: Release Please
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ "main" ]
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  call:
+    uses: opiproject/actions/.github/workflows/release-please.yml@main
+    secrets: inherit
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
new file mode 100644
index 0000000..5ebf68d
--- /dev/null
+++ b/.github/workflows/release.yaml
@@ -0,0 +1,11 @@
+name: Release
+
+on:
+  workflow_dispatch:
+  release:
+    types: [published]
+
+jobs:
+  release-docker:
+    uses: ./.github/workflows/docker-publish.yml
+    secrets: inherit
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
new file mode 100644
index 0000000..518564e
--- /dev/null
+++ b/.github/workflows/scorecard.yml
@@ -0,0 +1,13 @@
+name: OpenSSF
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  call:
+    uses: opiproject/actions/.github/workflows/scorecard.yml@main
+    secrets: inherit
diff --git a/.github/workflows/update-copyright-years-in-license-file.yml b/.github/workflows/update-copyright-years-in-license-file.yml
new file mode 100644
index 0000000..abb7b04
--- /dev/null
+++ b/.github/workflows/update-copyright-years-in-license-file.yml
@@ -0,0 +1,11 @@
+name: Update copyright year(s) in license file
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 3 1 1 *'
+
+jobs:
+  copyright:
+    uses: opiproject/actions/.github/workflows/update-copyright-years-in-license-file.yml@main
+    secrets: inherit