feat: Initial setup with EBIOS RM Light structure, tools, and public configuration

Author: mak3r-cyber

.github/CODEOWNERS

@@ -0,0 +1 @@
+*   @mak3r-cyber

.github/ISSUE_TEMPLATE/bug.md

@@ -0,0 +1,6 @@
+name: Bug
+body:
+- type: textarea
+  attributes: {label: Steps to reproduce}
+- type: input
+  attributes: {label: SHA/Tag}

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,9 @@
+---
+name: Bug report
+about: Report a defect
+labels: bug
+---
+**What happened**
+**Steps to reproduce**
+**Expected**
+**Logs/Screenshots**

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,8 @@
+---
+name: Feature request
+about: Propose an improvement
+labels: enhancement
+---
+**Problem to solve**
+**Proposed change**
+**Impact on docs/tests**

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,5 @@
+## Objective
+## Test plan
+## Checklist
+- [ ] Lint/Type checks pass
+- [ ] CI green

.github/pull_request_template.md

@@ -0,0 +1,6 @@
+## Summary
+## Changes
+## Tests / Docs
+## Checklist
+- [ ] No patient/PII data
+- [ ] CSV is source of truth

.github/workflows/ci.yml

@@ -0,0 +1,34 @@
+name: ci
+on:
+  push:
+    branches: [main]
+  pull_request:
+jobs:
+  qa:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - uses: actions/setup-python@v5
+      with: {python-version: '3.11'}
+    - run: python -m pip install -U pip && pip install ruff black mypy pandas openpyxl
+    - run: ruff check .
+    - run: black --check .
+    - run: mypy src
+  build-artifacts:
+    needs: qa
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - uses: actions/setup-python@v5
+      with: {python-version: '3.11'}
+    - run: pip install pandas openpyxl
+    - run: python tools/csv2xlsx.py
+    - uses: actions/upload-artifact@v4
+      with:
+        name: risk-matrix-xlsx
+        path: docs/reports/risk_matrix.xlsx
+  security:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - run: bash tools/sec_checks.sh

.github/workflows/csv2xlsx.yml

@@ -0,0 +1,22 @@
+name: csv-to-xlsx
+on:
+  push:
+    paths:
+      - '02-Matrices/**/*.csv'
+      - 'tools/csv2xlsx.py'
+      - '.github/workflows/csv2xlsx.yml'
+  workflow_dispatch:
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with: { python-version: '3.11' }
+      - run: python -m pip install --upgrade pip
+      - run: pip install pandas openpyxl
+      - run: python tools/csv2xlsx.py
+      - uses: actions/upload-artifact@v4
+        with:
+          name: risk-matrix-xlsx
+          path: docs/reports/risk_matrix.xlsx

.github/workflows/release.yml

@@ -0,0 +1,24 @@
+name: release
+on:
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'vX.Y.Z'
+        required: true
+jobs:
+  cut:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.11'
+      - run: pip install pandas openpyxl
+      - run: python tools/csv2xlsx.py
+      - uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ github.event.inputs.tag }}
+          files: docs/reports/risk_matrix.xlsx
+          generate_release_notes: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.gitignore

@@ -0,0 +1,7 @@
+# Ignore generated files
+docs/reports/*.xlsx
+
+# Ignore critical Intellectual Property (IP) files
+# These files should not be public, but are required locally for the methodology.
+02-Matrices/risk_matrix.csv
+03-Methodology/ebios-rm-light.md