diff --git a/.codeclimate.yml b/.codeclimate.yml
new file mode 100644
index 0000000000000000000000000000000000000000..c820af6b1e42ca776e8a890baebb90ba64e0d6b2
--- /dev/null
+++ b/.codeclimate.yml
@@ -0,0 +1,8 @@
+plugins:
+  phpmd:
+    enabled: true
+    config:
+      file_extensions:
+        - php
+        - inc
+      rulesets: "unusedcode,codesize,naming,controversial,design"
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 6119917f226a5a16fd4103165beb5861724de6a1..166d53144ef498f64949657cd76ee868fd07e8f8 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1,5 +1,13 @@
+stages:
+  - build
+  - test
+  - deploy
+  - performance
+  - dast
+
 variables:
     TO_PACKAGE: 'appinfo l10n lib templates js img'
+    SECURE_LOG_LEVEL: error
 include:
   - project: "e/infra/ecloud/nextcloud-apps/ci-templates"
     ref: main
@@ -7,3 +15,16 @@ include:
   - project: "e/infra/ecloud/nextcloud-apps/ci-templates"
     ref: main
     file: "nc-apps-deploy.yml"
+  - template: Jobs/SAST.gitlab-ci.yml
+  - template: Jobs/Dependency-Scanning.gitlab-ci.yml
+  - template: Jobs/Code-Quality.gitlab-ci.yml
+  - template: Jobs/Test.gitlab-ci.yml
+  - template: Jobs/Code-Intelligence.gitlab-ci.yml
+  - template: Jobs/Browser-Performance-Testing.gitlab-ci.yml
+  - template: Jobs/Secret-Detection.gitlab-ci.yml
+  - template: Security/DAST.gitlab-ci.yml
+
+code_quality:
+  tags: # For picking privileged infra-runners
+    - privileged
+    - infra