ci: split out jobs into separate workflows

.github/workflows/codeql.yml

+name: CodeQL
+
+on:
+  pull_request:
+
+jobs:
+    codeql:
+    name: Analyze Codebase
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'python' ]
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+            languages: ${{matrix.language}}
+            queries: +security-and-quality
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+            category: "/language:${{matrix.language}}"
+

.github/workflows/copyright-checks.yml

+name: Copyright Checks
+
+on:
+  pull-request:
+
+jobs:
+    codeql:
+    name: Analyze Codebase
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'python' ]
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+            languages: ${{matrix.language}}
+            queries: +security-and-quality
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+            category: "/language:${{matrix.language}}"
+

.github/workflows/pre-merge.yml

@@ -51,54 +51,7 @@ jobs:
     - uses: pre-commit/action@v3.0.0
       timeout-minutes: 3
 
-  copyright-checks:
-    runs-on: ubuntu-24.04
-    container:
-      image: ghcr.io/dynemo-ai/dynemo/helm-tester:0.1.1
-      options: --tty
-      volumes:
-      - ${{ github.workspace }}:/workspace
-    permissions:
-      contents: read
-      packages: read
-    steps:
-    - uses: actions/checkout@v4
-      # Allowlist both variants of the mounted source directory.
-    - run: git config --global --add safe.directory /__w/dynemo/dynemo
-    - run: git config --global --add safe.directory /workspace
-    - run: pwsh /workspace/.github/workflows/copyright-check.ps1
-      env:
-        NVBUILD_VERBOSITY: DETAILED
-      timeout-minutes: 2
-      working-directory: /workspace
-
-  codeql:
-    name: Analyze Codebase
-    runs-on: ubuntu-latest
-    permissions:
-      actions: read
-      contents: read
-      security-events: write
-
-    strategy:
-      fail-fast: false
-      matrix:
-        language: [ 'python' ]
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
-
-      - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
-        with:
-            languages: ${{matrix.language}}
-            queries: +security-and-quality
 
-      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
-        with:
-            category: "/language:${{matrix.language}}"
 
   # providers_validation:
   #   runs-on: ubuntu-latest