build: Enable Dependabot to ensure that the dependencies will be upda…

…ted on a monthly basis

.github/dependabot.yml

@@ -0,0 +1,11 @@
+---
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      interval: "monthly"

.github/workflows/golang.yml

@@ -0,0 +1,27 @@
+---
+name: Golang
+"on":
+  # required by gomod-go-version-updater to trigger this action once pr has
+  # been reviewed
+  pull_request_review:
+    types: [submitted]
+  push:
+permissions:
+  contents: read
+  packages: read
+jobs:
+  mcvs-golang-action:
+    runs-on: ubuntu-20.04
+    steps:
+      - uses: actions/[email protected]
+      - uses: schubergphilis/[email protected]
+        with:
+          code_coverage_expected: 59.8
+          golang-unit-tests-exclusions: |-
+            \(cmd\/mcvs-scanner\|cmd\/mcvs-scanner-cli\|deprecated\|docs\/swagger\|mocks\)
+          golangci-lint-version: v1.61.0
+          token: ${{ secrets.GITHUB_TOKEN }}
+          trivy-action-db: |-
+            ghcr.io/schubergphilis/mcvs-scanner-trivy-db:2
+          trivy-action-java-db: |-
+            ghcr.io/schubergphilis/mcvs-scanner-trivy-java-db:1

.github/workflows/gomod-go-version-updater.yml

@@ -0,0 +1,14 @@
+---
+name: gomod-go-version-updater-action
+"on":
+  schedule:
+    - cron: "42 5 * * 1-5"
+permissions:
+  contents: write
+  pull-requests: write
+  repository-projects: write
+jobs:
+  gomod-go-version-updater-action:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: schubergphilis/[email protected]

.github/workflows/mcvs-pr-validation.yml

@@ -0,0 +1,19 @@
+---
+name: MCVS-PR-validation-action
+"on":
+  pull_request:
+    types:
+      - edited
+      - opened
+      - reopened
+      - synchronize
+  workflow_call:
+permissions:
+  contents: read
+  pull-requests: read
+jobs:
+  MCVS-PR-validation-action:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/[email protected]
+      - uses: schubergphilis/[email protected]

.gitignore

@@ -1 +1,2 @@
+.vscode
 reports