CI: Add GitHub Action tasks

.github/dependabot.yml

@@ -5,3 +5,8 @@ updates:
     schedule:
       interval: weekly
     open-pull-requests-limit: 99
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: weekly

.github/workflows/ssdlc.yml

@@ -0,0 +1,17 @@
+name: SSDLC Actions
+
+on:
+  push:
+    branches:
+    - "main"
+  pull_request:
+    branches:
+    - "main"
+
+permissions: {}
+
+jobs:
+  code-security-analysis:
+    permissions:
+      security-events: write # required for uploading code scanning alerts
+    uses: mozilla/ssdlc-actions/.github/workflows/code-security-analysis-public-repo.yml@ca8be48f3c06204fb16a3bd5ffa6d916782bbc76 # 2026-06-29

.github/workflows/test.yml

@@ -0,0 +1,46 @@
+name: "Test"
+
+on:
+  push:
+    branches:
+      - "main"
+  pull_request:
+    branches:
+      - "main"
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - &checkout
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Build webapp
+        run: npm run build
+
+  test-functions:
+    runs-on: ubuntu-latest
+    steps:
+      - *checkout
+
+      - name: Install dependencies
+        run: cd functions && npm install
+
+      - name: Test Cloud Functions in offline mode
+        run: cd functions && npm test
+
+  test-app:
+    runs-on: ubuntu-latest
+    steps:
+      - *checkout
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Run app tests
+        run: npm test