ci(secu): update analyses

.githooks/pre-commit

@@ -0,0 +1,12 @@
+#!/usr/bin/env sh
+set -eu
+
+# ensure gitleaks is available
+if ! command -v gitleaks >/dev/null 2>&1; then
+  echo "Error: gitleaks is not installed or not in PATH." >&2
+  echo "Install: https://github.com/gitleaks/gitleaks#install" >&2
+  exit 1
+fi
+
+# scan for secrets before commit
+gitleaks protect -v --staged

.github/CODEOWNERS

@@ -1,9 +1,10 @@
 
-# This file pairs with the automated code review assignment setting to make that system work
-#   https://help.github.com/en/github/setting-up-and-managing-organizations-and-teams/managing-code-review-assignment-for-your-team
-
-# Docs: https://help.github.com/articles/about-codeowners/
-
-
-# default owners for the entire repo
-*      @GoogleChrome/lighthouse-hackers
+# Pipelines Codeowners rules
+.github/**                    @quanta-computing/owners-pipelines
+.yamlfix.toml                 @quanta-computing/owners-pipelines
+
+# Security Codeowners rules
+.gitleaks.toml                @quanta-computing/owners-security
+.gitleaksignore               @quanta-computing/owners-security
+.githooks/pre-commit          @quanta-computing/owners-security
+**/secu-*.yml                 @quanta-computing/owners-security

.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: '/'
+    schedule:
+      interval: monthly
+    open-pull-requests-limit: 50
+    labels:
+      - 'dependencies'
+      - 'gha'

.github/workflows/actionlint.yml

@@ -0,0 +1,26 @@
+name: actionlint
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+on:
+  workflow_dispatch:
+  pull_request:
+    branches:
+      - master
+    paths:
+      - ".github/**"
+
+jobs:
+  action-lint:
+    runs-on: ubuntu-24.04
+    steps:
+      - name: Checkout sources
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+
+      - name: Ensure SHA pinned actions
+        uses: centreon/github-actions-ensure-sha-pinned-actions@47d553c67ceb08ad660deaeb3b994e47a3dd8fc3 # v3.0.23.3
+        with:
+          allowlist: |
+            centreon/security-tools