ci: Add GitHub workflows for dependency review, code quality checks, …

[adrianlasota]

This pull request makes significant updates to the repository's CI/CD and code quality automation by standardizing workflows, delegating job definitions to a centralized template repository, and introducing new configuration files for dependency and security management. The changes improve maintainability, consistency, and security across the development lifecycle.

CI/CD Workflow Standardization and Delegation

• Replaces local workflow definitions (e.g., build_upload_whl.yml, pull_requests.yml, manual_release.yml) with references to reusable workflows from the intel/mfd repository, ensuring consistency and reducing duplication across projects. Updates job names, matrix strategies, and input parameters for better clarity and maintainability. [1] [2] [3] [4]

Addition of Code Quality and Review Automation

• Adds new workflows for code standard checks, PR title/commit validation, dependency review, and test execution, all referencing centralized templates. This automates quality gates and security checks for every pull request and push to main. [1] [2] [3] [4]

Security and Dependency Management Enhancements

• Introduces .github/dependabot.yml to enable daily checks for Python dependencies, and .github/dependency_review.yml to enforce license and vulnerability policies for dependencies, increasing supply chain security. [1] [2]

CodeQL Analysis Workflow Refactoring

• Refactors the codeql.yml workflow to use a remote reusable workflow, simplifies the language matrix, and standardizes job and input names for improved security scanning. [1] [2]

---

CI/CD Workflow Standardization

• Delegates build, test, and release workflows (pull_requests.yml, manual_release.yml, main.yml) to reusable workflows in intel/mfd, removing complex local job logic and aligning with organization-wide best practices. [1] [2] [3] [4]

Quality and Security Automation

• Adds workflows for code standard checks, PR format validation, dependency review, and test execution, all referencing shared templates for consistent enforcement. [1] [2] [3] [4]

Dependency and Vulnerability Management

• Adds .github/dependabot.yml for daily dependency updates and .github/dependency_review.yml to enforce strict license and vulnerability policies. [1] [2]

Security Scanning Improvements

• Refactors codeql.yml to use a remote, reusable workflow and simplifies configuration for multi-language analysis. [1] [2]

[Copilot]

Pull Request Overview

This pull request modernizes the repository's CI/CD infrastructure by transitioning from local workflow definitions to reusable workflows hosted in the intel/mfd repository, while adding comprehensive code quality and security automation.

• Replaces local CI/CD workflows with centralized reusable workflows from intel/mfd repository
• Introduces automated code quality checks, dependency review, and security scanning workflows
• Adds dependency management configuration through Dependabot and dependency review policies

Reviewed Changes

Copilot reviewed 11 out of 11 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
.github/workflows/run_tests.yml	New workflow for running unit and functional tests using centralized template
.github/workflows/pull_requests.yml	Simplified dev build workflow delegating to reusable template
.github/workflows/manual_release.yml	Refactored release workflow using centralized template with updated matrix strategy
.github/workflows/main.yml	New CI build workflow for main branch pushes
.github/workflows/dependency_review.yml	New workflow for automated dependency security and license review
.github/workflows/codeql.yml	Simplified CodeQL analysis workflow using reusable template
.github/workflows/check_pr_format.yml	New workflow for PR title and commit message validation
.github/workflows/check_code_standard.yml	New workflow for code standard compliance checking
.github/workflows/build_upload_whl.yml	Removed local reusable workflow in favor of centralized templates
.github/dependency_review.yml	Configuration file defining license and vulnerability policies
.github/dependabot.yml	Configuration for automated daily dependency updates

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[mfd-intel-bot]

We don't publish DEVs .whl.
To build .whl, run 'pip install git+https://intel/mfd-kvm@ci'

[Copilot]

Pull Request Overview

Copilot reviewed 12 out of 12 changed files in this pull request and generated no new comments.

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}