add GHA configs

.github/workflows/ci.yml

@@ -0,0 +1,21 @@
+name: CI
+
+on:
+  push:
+  pull_request:
+
+env:
+  CI: true
+
+jobs:
+  lint:
+    uses: NicTool/.github/.github/workflows/lint.yml@main
+
+  coverage:
+    uses: NicTool/.github/.github/workflows/coverage.yml@main
+    secrets: inherit
+
+  test:
+    needs: lint
+    uses: NicTool/.github/.github/workflows/test.yml@main
+    secrets: inherit

.github/workflows/codeql.yml

@@ -0,0 +1,14 @@
+name: CodeQL
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [main]
+  schedule:
+    - cron: '18 7 * * 4'
+
+jobs:
+  codeql:
+    uses: NicTool/.github/.github/workflows/codeql.yml@main

.github/workflows/publish.yml

@@ -0,0 +1,18 @@
+name: publish
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - package.json
+    release:
+      types: [published]
+
+env:
+  CI: true
+
+jobs:
+  publish:
+    uses: NicTool/.github/.github/workflows/publish.yml@main
+    secrets: inherit