I want to build a solid CI with GitHub Actions

Hello you. Thank you for taking the time to look at my post.

First, let me give you some context. I am currently investigating some topics to apply to some future projects:

• Some web applications (mostly javascript) as a team and my own
• A component library to based on a UI library (like Bulma, for example)

From those investigations, I would like to learn about CI/CD steps to integrate with my future PRs. Some of the steps I am planning to add are:

• Unit testing (with Codecov)
• DAST/SAST scanning (I don't have any idea in mind)
• Code quality analysis (I am looking at Codacy, but never used it)

My idea is to use GitHub repositories to create the issues, link them to the repo's PRs and add the review steps with GitHub Actions

So, I would like to start the discussion with this questions:

• ¿Do you think there are more steps to have in mind to be included in PR analysis?
• ¿Do you know any tools to help this process?

Thank you again for your time and help.