chore: add CodeQL, dependency review, dependabot, release-drafter config, and README badges

- CodeQL security scanning workflow (weekly + push/PR)

- Dependency review action for PRs (fail on high severity)

- Dependabot for npm, pip, and GitHub Actions updates

- Release-drafter config with changelog categories and autolabeler

- README badges: validate, CI, CodeQL, pages, links, release, issues

Made-with: Cursor

Author: TMHSDigital

.github/dependabot.yml

@@ -0,0 +1,33 @@
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/mcp-server"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 10
+    labels:
+      - "dependencies"
+    commit-message:
+      prefix: "deps"
+
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    open-pull-requests-limit: 5
+    labels:
+      - "dependencies"
+    commit-message:
+      prefix: "deps"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 10
+    labels:
+      - "ci"
+    commit-message:
+      prefix: "ci"

.github/release-drafter.yml

@@ -1,46 +1,71 @@
 name-template: "v$RESOLVED_VERSION"
 tag-template: "v$RESOLVED_VERSION"
+template: |
+  ## What's Changed
+
+  $CHANGES
+
+  **Full Changelog**: https://github.com/$OWNER/$REPOSITORY/compare/$PREVIOUS_TAG...v$RESOLVED_VERSION
 categories:
-  - title: "Skills"
+  - title: "New MCP Tools"
     labels:
-      - "skill"
-  - title: "Rules"
+      - "new-tool"
+      - "mcp"
+  - title: "Skills & Rules"
     labels:
+      - "skill"
       - "rule"
-  - title: "MCP Tools"
-    labels:
-      - "mcp-tool"
-  - title: "Enhancements"
-    labels:
-      - "enhancement"
   - title: "Bug Fixes"
     labels:
       - "bug"
+      - "fix"
   - title: "Documentation"
     labels:
       - "documentation"
-  - title: "Maintenance"
+      - "docs"
+  - title: "CI / Infrastructure"
     labels:
-      - "maintenance"
+      - "ci"
+      - "infrastructure"
       - "dependencies"
-change-template: "- $TITLE @$AUTHOR (#$NUMBER)"
+  - title: "Other Changes"
+    labels:
+      - "*"
+change-template: "- $TITLE (#$NUMBER) @$AUTHOR"
 change-title-escapes: '\<*_&'
 version-resolver:
   major:
     labels:
       - "major"
+      - "breaking"
   minor:
     labels:
       - "minor"
+      - "feature"
+      - "new-tool"
   patch:
     labels:
       - "patch"
+      - "bug"
+      - "fix"
+      - "docs"
   default: patch
-template: |
-  ## Changes
-
-  $CHANGES
-
-  ## Contributors
-
-  $CONTRIBUTORS
+exclude-labels:
+  - "skip-changelog"
+autolabeler:
+  - label: "documentation"
+    files:
+      - "*.md"
+      - "docs/**"
+  - label: "ci"
+    files:
+      - ".github/**"
+  - label: "mcp"
+    files:
+      - "mcp-server/**"
+  - label: "skill"
+    files:
+      - "skills/**"
+  - label: "rule"
+    files:
+      - "rules/**"

.github/workflows/codeql.yml

@@ -0,0 +1,37 @@
+name: CodeQL
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  schedule:
+    - cron: "0 6 * * 1"
+
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [javascript-typescript]
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: ${{ matrix.language }}
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v3
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: "/language:${{ matrix.language }}"

.github/workflows/dependency-review.yml

@@ -0,0 +1,19 @@
+name: Dependency Review
+
+on:
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/dependency-review-action@v4
+        with:
+          fail-on-severity: high
+          comment-summary-in-pr: always

README.md

@@ -9,13 +9,20 @@
 </p>
 
 <p align="center">
-  <a href="https://github.com/TMHSDigital/Docker-Developer-Tools/actions/workflows/validate.yml"><img src="https://img.shields.io/github/actions/workflow/status/TMHSDigital/Docker-Developer-Tools/validate.yml?branch=main&label=CI" alt="CI" /></a>
+  <a href="https://github.com/TMHSDigital/Docker-Developer-Tools/actions/workflows/validate.yml"><img src="https://img.shields.io/github/actions/workflow/status/TMHSDigital/Docker-Developer-Tools/validate.yml?branch=main&label=validate" alt="Validate" /></a>
+  <a href="https://github.com/TMHSDigital/Docker-Developer-Tools/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/TMHSDigital/Docker-Developer-Tools/ci.yml?branch=main&label=CI" alt="CI" /></a>
+  <a href="https://github.com/TMHSDigital/Docker-Developer-Tools/actions/workflows/codeql.yml"><img src="https://img.shields.io/github/actions/workflow/status/TMHSDigital/Docker-Developer-Tools/codeql.yml?branch=main&label=CodeQL" alt="CodeQL" /></a>
+  <a href="https://github.com/TMHSDigital/Docker-Developer-Tools/actions/workflows/pages.yml"><img src="https://img.shields.io/github/actions/workflow/status/TMHSDigital/Docker-Developer-Tools/pages.yml?branch=main&label=pages" alt="Pages" /></a>
+  <a href="https://github.com/TMHSDigital/Docker-Developer-Tools/actions/workflows/links.yml"><img src="https://img.shields.io/github/actions/workflow/status/TMHSDigital/Docker-Developer-Tools/links.yml?branch=main&label=links" alt="Links" /></a>
+  <a href="https://github.com/TMHSDigital/Docker-Developer-Tools/releases/latest"><img src="https://img.shields.io/github/v/release/TMHSDigital/Docker-Developer-Tools" alt="Release" /></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-CC--BY--NC--ND--4.0-blue" alt="License" /></a>
-  <img src="https://img.shields.io/badge/version-1.0.0-green" alt="Version" />
+</p>
+<p align="center">
   <a href="https://www.npmjs.com/package/@tmhs/docker-mcp"><img src="https://img.shields.io/npm/v/@tmhs/docker-mcp" alt="npm" /></a>
   <a href="https://www.npmjs.com/package/@tmhs/docker-mcp"><img src="https://img.shields.io/npm/dm/@tmhs/docker-mcp" alt="npm downloads" /></a>
   <a href="https://www.npmjs.com/package/@tmhs/docker-mcp"><img src="https://img.shields.io/npm/unpacked-size/@tmhs/docker-mcp" alt="npm size" /></a>
   <a href="https://github.com/TMHSDigital/Docker-Developer-Tools/stargazers"><img src="https://img.shields.io/github/stars/TMHSDigital/Docker-Developer-Tools" alt="Stars" /></a>
+  <a href="https://github.com/TMHSDigital/Docker-Developer-Tools/issues"><img src="https://img.shields.io/github/issues/TMHSDigital/Docker-Developer-Tools" alt="Issues" /></a>
   <img src="https://img.shields.io/github/last-commit/TMHSDigital/Docker-Developer-Tools" alt="Last Commit" />
   <img src="https://img.shields.io/badge/Cursor-Plugin-purple" alt="Cursor Plugin" />
   <img src="https://img.shields.io/badge/Docker-2496ED?logo=docker&logoColor=white" alt="Docker" />