chore: add issue templates, code of conduct and secret scanning

.github/CODEOWNERS

@@ -1,5 +1,3 @@
-@ayodejidev
-@maybebot
-@dimitra-adyen
+*                          @ayodejidev @maybebot @dimitra-adyen
 
-markdown-confluence-sync @maybebot
+/markdown-confluence-sync/ @maybebot

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,64 @@
+---
+name: Bug report
+about: Report an action that is not behaving as documented
+title: '[Bug] '
+labels: 'bug'
+assignees: ''
+---
+
+## Action
+
+Which action is affected, and at which version?
+
+- Action: `Adyen/github-actions-internal/<action>`
+- Version / ref: <!-- e.g. v1, v1.2.0, or a commit SHA -->
+
+## Description
+
+A clear description of what is going wrong.
+
+## Expected behavior
+
+What you expected the action to do, and where that behavior is documented (link to the action README if relevant).
+
+## Actual behavior
+
+What actually happens.
+
+## Steps to reproduce
+
+1.
+2.
+3.
+
+## Workflow snippet
+
+The relevant part of the consuming workflow, with the action inputs used.
+
+```yaml
+steps:
+  - uses: actions/checkout@v7
+
+  - uses: Adyen/github-actions-internal/<action>@<version>
+    with:
+      # inputs
+```
+
+## Logs
+
+Relevant workflow run output or error messages.
+
+> Do not paste secrets, tokens, or other credentials. Redact any sensitive values before submitting.
+
+```
+```
+
+## Additional context
+
+Anything else that helps, such as when it last worked, recent version bumps, or a link to a failing workflow run.
+
+## Are you willing to fix this?
+
+- [ ] I would like to open a pull request for this
+
+If so, see [CONTRIBUTING.md](https://github.com/Adyen/github-actions-internal/blob/main/CONTRIBUTING.md).

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,67 @@
+---
+name: Feature request
+about: Propose a new action or a change to an existing one
+title: '[Feature] '
+labels: 'enhancement'
+assignees: ''
+---
+
+## Scope
+
+- [ ] Change to an existing action: `Adyen/github-actions-internal/<action>`
+- [ ] New reusable action
+
+## Problem
+
+What automation problem are you trying to solve? Describe the current workflow and why it is duplicated, manual, or error-prone across repositories.
+
+## Proposed solution
+
+What should the action do? Keep the interface small and explicit.
+
+## Proposed interface
+
+Inputs, outputs, required permissions, and secrets you expect.
+
+| Input | Required | Default | Description |
+| :---- | :---- | :---- | :---- |
+| | | | |
+
+| Output | Description |
+| :---- | :---- |
+| | |
+
+- Required token permissions:
+- Required secrets:
+
+## Example usage
+
+```yaml
+steps:
+  - uses: actions/checkout@v7
+
+  - uses: Adyen/github-actions-internal/<action>@<version>
+    with:
+      # inputs
+```
+
+## Backwards compatibility
+
+Does this change the interface or behavior of an existing action? If so, can it be done within the current major version, or does it require a breaking change?
+
+- [ ] Backwards compatible
+- [ ] Breaking change
+
+## Alternatives considered
+
+Existing actions from the Marketplace, inline workflow steps, or other approaches, and why they are not sufficient.
+
+## Additional context
+
+Which repositories would consume this, and anything else that is relevant.
+
+## Are you willing to implement this?
+
+- [ ] I would like to open a pull request for this
+
+If so, see [CONTRIBUTING.md](https://github.com/Adyen/github-actions-internal/blob/main/CONTRIBUTING.md).

.github/workflows/secret-scan.yml

@@ -0,0 +1,30 @@
+name: Secret scan
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+  pull-requests: read
+
+jobs:
+  trufflehog:
+    name: TruffleHog
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+
+      - name: Scan for credentials, tokens, and private keys
+        uses: trufflesecurity/trufflehog@6f3c981e7b77f235fd2702dd74af25fc4b72bf11 # v3.96.0
+        with:
+          extra_args: --results=verified,unknown

CONTRIBUTING.md

@@ -3,7 +3,7 @@
 The following is a set of guidelines for contributing to Adyen and its repositories, which are hosted in the [Adyen Organization](https://github.com/adyen) on GitHub. These are mostly guidelines, not rules.
 
 ## Code of Conduct
-This project and everyone participating in it is governed by the [Adyen Code of Conduct](CODE_OF_CONDUCT.md). By participating, you are expected to uphold this code.
+This project and everyone participating in it is governed by the [Adyen Code of Conduct](https://github.com/adyen/.github/blob/main/CODE_OF_CONDUCT.md). By participating, you are expected to uphold this code.
 
 ## How to contribute
 1. Fork the repository.

README.md

@@ -22,7 +22,7 @@ For example:
 
 ```
 steps:
-  - uses: actions/checkout@v4
+  - uses: actions/checkout@v7
 
   - uses: Adyen/github-actions-internal/markdown-confluence-sync@v1
 ```