chore: add erlang-ci workflow (#13)

* chore: add erlang-ci workflow with audit and SBOM scanning

Add Taure/erlang-ci reusable workflow with fmt, xref, dialyzer, eunit,
ex_doc, audit, SBOM generation/scanning, and dependency submission.
Add .tool-versions for reproducible builds. Add rebar3_audit and
rebar3_sbom project plugins.

* fix: suppress xref warning for load_local_schemas/0 public API

Author: Taure

.github/workflows/ci.yml

@@ -0,0 +1,26 @@
+name: CI
+
+on:
+  pull_request:
+    branches: [master]
+  push:
+    branches: [master]
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  ci:
+    uses: Taure/erlang-ci/.github/workflows/ci.yml@v1
+    permissions:
+      contents: write
+      pull-requests: write
+    with:
+      version-file: '.tool-versions'
+      enable-ex-doc: true
+      enable-audit: true
+      enable-sbom: true
+      enable-sbom-scan: true
+      enable-dependency-submission: true
+      enable-summary: true

.tool-versions

@@ -0,0 +1,2 @@
+erlang 28.0.1
+rebar 3.24.0

rebar.config

@@ -4,6 +4,10 @@
     {jesse, "1.8.1"}
 ]}.
 
+{xref_ignores, [
+    {nova_json_schemas, load_local_schemas, 0}
+]}.
+
 {dialyzer, [
     {plt_extra_apps, [
         nova,
@@ -14,7 +18,10 @@
 
 {project_plugins, [
     {erlfmt, "~>1.3"},
-    rebar3_ex_doc
+    rebar3_ex_doc,
+    rebar3_audit,
+    {rebar3_sbom,
+        {git, "https://github.com/Taure/rebar3_sbom.git", {branch, "feat/include-otp-components"}}}
 ]}.
 
 {hex, [{doc, #{provider => ex_doc}}]}.