chore(ci): workflows: add shared workflows

Author: grokify

.github/dependabot.yaml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+- package-ecosystem: gomod
+  directory: /
+  schedule:
+    interval: daily
+- package-ecosystem: github-actions
+  directory: /
+  schedule:
+    interval: daily

.github/workflows/go-ci.yaml

@@ -0,0 +1,25 @@
+name: Go CI
+permissions:
+  contents: read
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - '**.go'
+      - 'go.mod'
+      - 'go.sum'
+      - '.github/workflows/go-ci.yaml'
+  pull_request:
+    branches:
+      - main
+    paths:
+      - '**.go'
+      - 'go.mod'
+      - 'go.sum'
+      - '.github/workflows/go-ci.yaml'
+  workflow_dispatch:
+
+jobs:
+  ci:
+    uses: plexusone/.github/.github/workflows/go-ci.yaml@main

.github/workflows/go-lint.yaml

@@ -0,0 +1,27 @@
+name: Go Lint
+permissions:
+  contents: read
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - '**.go'
+      - 'go.mod'
+      - 'go.sum'
+      - '.golangci.yml'
+      - '.github/workflows/go-lint.yaml'
+  pull_request:
+    branches:
+      - main
+    paths:
+      - '**.go'
+      - 'go.mod'
+      - 'go.sum'
+      - '.golangci.yml'
+      - '.github/workflows/go-lint.yaml'
+  workflow_dispatch:
+
+jobs:
+  lint:
+    uses: plexusone/.github/.github/workflows/go-lint.yaml@main

.github/workflows/go-sast-codeql.yaml

@@ -0,0 +1,29 @@
+name: Go SAST (CodeQL)
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - '**.go'
+      - 'go.mod'
+      - 'go.sum'
+      - '.github/workflows/go-sast-codeql.yaml'
+  pull_request:
+    branches:
+      - main
+    paths:
+      - '**.go'
+      - 'go.mod'
+      - 'go.sum'
+      - '.github/workflows/go-sast-codeql.yaml'
+  schedule:
+    - cron: '0 6 * * 1'
+  workflow_dispatch:
+
+jobs:
+  sast:
+    uses: plexusone/.github/.github/workflows/go-sast-codeql.yaml@main

.golangci.yaml

@@ -0,0 +1,39 @@
+version: "2"
+run:
+  go: "1.23"
+linters:
+  enable:
+    - dogsled
+    - dupl
+    - gosec
+    - misspell
+    - nakedret
+    - staticcheck
+    - unconvert
+    - unparam
+    - whitespace
+  exclusions:
+    generated: lax
+    presets:
+      - comments
+      - common-false-positives
+      - legacy
+      - std-error-handling
+    paths:
+      - third_party$
+      - builtin$
+      - examples$
+  settings:
+    staticcheck:
+      checks:
+        - "-QF1008" # Disable the "could remove embedded field" check
+formatters:
+  enable:
+    - gofmt
+    - goimports
+  exclusions:
+    generated: lax
+    paths:
+      - third_party$
+      - builtin$
+      - examples$