Added initial version of Pre, Post merge and Dependabot config

Author: adimoft

.github/CODEOWNERS

@@ -1,4 +1,16 @@
-* @open-edge-platform/image-composer-maintain 
+# SPDX-FileCopyrightText: 2026 Intel Corporation
+#
+# SPDX-License-Identifier: Apache-2.0
+
+# These owners will be the default owners for everything in the repo. Unless a
+# later match takes precedence, these owners will be requested for review when
+# someone opens a pull request.
+
+# Everything requires image-composer-maintain team review by default
+* @open-edge-platform/image-composer-maintain
+
+# CI files
+.github/ @adimoft @daveroge @shanedonohue @manilk1x
 
 # documentation content
 /docs @open-edge-platform/open-edge-platform-docs-write

.github/dependabot.yml

@@ -0,0 +1,13 @@
+# SPDX-FileCopyrightText: (C) 2026 Intel Corporation
+# SPDX-License-Identifier: Apache-2.0
+
+---
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: daily
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: "[gha] "

.github/workflows/post-merge.yml

@@ -0,0 +1,38 @@
+# SPDX-FileCopyrightText: (C) 2026 Intel Corporation
+# SPDX-License-Identifier: Apache-2.0
+---
+
+name: Post-Merge CI Pipeline
+permissions:
+  contents: read
+
+on:   # yamllint disable-line rule:truthy
+  push:
+    branches:
+      - main
+      - release-*
+  workflow_dispatch:
+jobs:
+  post-merge:
+    permissions:
+      contents: read
+      security-events: write
+      id-token: write
+    uses: open-edge-platform/orch-ci/.github/workflows/post-merge.yml@467367d6f859a4654f2645ca78efd60035cf390c  # 2026.0.8
+    with:
+      run_build: false
+      run_version_check: true
+      run_dep_version_check: false
+      run_version_tag: true
+      run_docker_build: false
+      run_docker_push: false
+      run_helm_build: false
+      run_helm_push: false
+      run_version_dev: true
+      prefix_tag_separator: "/"
+      trivy_image_skip: "ghcr.io/dependabot/dependabot-updater-core:latest"
+    secrets:
+      SYS_EMF_GH_TOKEN: ${{ secrets.SYS_EMF_GH_TOKEN }}
+      NO_AUTH_ECR_PUSH_USERNAME: ${{ secrets.NO_AUTH_ECR_PUSH_USERNAME }}
+      NO_AUTH_ECR_PUSH_PASSWD: ${{ secrets.NO_AUTH_ECR_PUSH_PASSWD }}
+      MSTEAMS_WEBHOOK: ${{ secrets.TEAMS_WEBHOOK }}

.github/workflows/pre-merge.yml

@@ -0,0 +1,30 @@
+# SPDX-FileCopyrightText: (C) 2026 Intel Corporation
+# SPDX-License-Identifier: Apache-2.0
+---
+
+name: Pre-Merge CI Pipeline
+permissions:
+  contents: read
+
+on:  # yamllint disable-line rule:truthy
+  pull_request:
+    branches:
+      - main
+  workflow_dispatch:
+jobs:
+  pre-merge:
+    permissions:
+      contents: read
+    uses: open-edge-platform/orch-ci/.github/workflows/pre-merge.yml@467367d6f859a4654f2645ca78efd60035cf390c  # 2026.0.8
+    with:
+      run_version_check: true
+      run_security_scans: true
+      run_dep_version_check: false
+      run_build: false
+      run_lint: true
+      run_test: false
+      run_validate_clean_folder: false
+      run_docker_build: false
+      bootstrap_tools: "go,gotools,nodejs"
+      trivy_config_path: trivy.yaml
+    secrets: inherit