build: Enable Dependabot to ensure that the dependencies will be updated on a monthly basis

.github/dependabot.yml

@@ -0,0 +1,11 @@
+---
+version: 2
+updates:
+ - package-ecosystem: "github-actions"
+ directory: "/"
+ schedule:
+ interval: "monthly"
+ - package-ecosystem: "gomod"
+ directory: "/"
+ schedule:
+ interval: "monthly"

.github/workflows/golang.yml

@@ -0,0 +1,27 @@
+---
+name: Golang
+"on":
+ # required by gomod-go-version-updater to trigger this action once pr has
+ # been reviewed
+ pull_request_review:
+ types: [submitted]
+ push:
+permissions:
+ contents: read
+ packages: read
+jobs:
+ mcvs-golang-action:
+ runs-on: ubuntu-20.04
+ steps:
+ - uses: actions/checkout@v4.2.1
+ - uses: schubergphilis/mcvs-golang-action@v0.8.1
+ with:
+ code_coverage_expected: 59.8
+ golang-unit-tests-exclusions: |-
+ \(cmd\/mcvs-scanner\|cmd\/mcvs-scanner-cli\|deprecated\|docs\/swagger\|mocks\)
+ golangci-lint-version: v1.61.0
+ token: ${{ secrets.GITHUB_TOKEN }}
+ trivy-action-db: |-
+ ghcr.io/schubergphilis/mcvs-scanner-trivy-db:2
+ trivy-action-java-db: |-
+ ghcr.io/schubergphilis/mcvs-scanner-trivy-java-db:1

.github/workflows/gomod-go-version-updater.yml

@@ -0,0 +1,14 @@
+---
+name: gomod-go-version-updater-action
+"on":
+ schedule:
+ - cron: "42 5 * * 1-5"
+permissions:
+ contents: write
+ pull-requests: write
+ repository-projects: write
+jobs:
+ gomod-go-version-updater-action:
+ runs-on: ubuntu-22.04
+ steps:
+ - uses: schubergphilis/gomod-go-version-updater-action@v0.1.5

.github/workflows/mcvs-pr-validation.yml

@@ -0,0 +1,19 @@
+---
+name: MCVS-PR-validation-action
+"on":
+ pull_request:
+ types:
+ - edited
+ - opened
+ - reopened
+ - synchronize
+ workflow_call:
+permissions:
+ contents: read
+ pull-requests: read
+jobs:
+ MCVS-PR-validation-action:
+ runs-on: ubuntu-22.04
+ steps:
+ - uses: actions/checkout@v4.2.1
+ - uses: schubergphilis/mcvs-pr-validation-action@v0.2.0

.gitignore

@@ -1 +1,2 @@
+.vscode
 reports