🔄 created local '.github/workflows/' from remote 'workflows/code-quality/'

Author: JesperDramsch

.github/workflows/codeql.yml

@@ -0,0 +1,25 @@
+# .github/workflows/codeql.yml
+name: CodeQL Analysis
+
+on:
+  push:
+    branches: [ main, master ]
+  pull_request:
+    branches: [ main, master ]
+  schedule:
+  - cron: '0 0 * * 0'
+
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+
+    steps:
+    - uses: actions/checkout@v3
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v2
+      with:
+        languages: python
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v2

.github/workflows/dependabot.yml

@@ -0,0 +1,16 @@
+name: Dependabot PR CI
+on:
+  schedule:
+    - cron: "0 */6 * * *" # Every six hours
+  workflow_dispatch:
+jobs:
+  auto-merge:
+    name: Auto Merge
+    runs-on: ubuntu-latest
+    steps:
+      - name: Merge minor/patch updates
+        uses: koj-co/dependabot-pr-action@master
+        with:
+          token: ${{ secrets.GH_PAT }}
+          merge-minor: true
+          merge-patch: true