diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..a0b611e
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,40 @@
+name: CI/CD Pipeline
+
+on:
+  pull_request:
+    branches:
+      - main
+    types:
+      - opened
+      - synchronize
+      - reopened
+  push:
+    branches:
+      - main
+
+jobs:
+  build:
+    if: github.event_name == 'pull_request'
+    uses: ahincho/nova-devops/.github/workflows/reusable-build-maven.yml@main
+    secrets: inherit
+
+  matrix:
+    if: github.event_name == 'pull_request'
+    uses: ahincho/nova-devops/.github/workflows/reusable-build-matrix.yml@main
+    with:
+      build-tool: maven
+    secrets: inherit
+
+  owasp:
+    if: github.event_name == 'pull_request'
+    uses: ahincho/nova-devops/.github/workflows/reusable-owasp-check.yml@main
+    with:
+      build-tool: maven
+    secrets: inherit
+
+  sbom:
+    if: github.event_name == 'pull_request'
+    uses: ahincho/nova-devops/.github/workflows/reusable-sbom.yml@main
+    with:
+      build-tool: maven
+    secrets: inherit
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
new file mode 100644
index 0000000..ec01c9e
--- /dev/null
+++ b/.github/workflows/publish.yml
@@ -0,0 +1,23 @@
+name: Publish Parent POM
+
+# Manually triggered publish for nova-spring-boot-parent. The release-please
+# pipeline has not been wired to this repo yet (it relies on tag-driven
+# publish-on-tag flow used by other repos; tracked separately). This workflow
+# supports manual 1.0.x bumps in the meantime so Gradle/Maven consumers
+# (e.g. instances/ms-course, instances/ms-forum) can resolve the parent.
+on:
+  workflow_dispatch:
+    inputs:
+      dry-run:
+        description: 'Dry-run: deploy to local file:// repo for verification'
+        required: false
+        type: string
+        default: 'false'
+
+jobs:
+  publish:
+    uses: ahincho/nova-devops/.github/workflows/reusable-publish-maven.yml@main
+    with:
+      dry-run: ${{ inputs.dry-run || 'false' }}
+    secrets:
+      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/pom.xml b/pom.xml
index 53bb8e6..9c4a433 100644
--- a/pom.xml
+++ b/pom.xml
@@ -6,7 +6,7 @@
 
     <groupId>pe.edu.nova.java</groupId>
     <artifactId>nova-spring-boot-parent</artifactId>
-    <version>0.1.0-SNAPSHOT</version>
+    <version>1.0.0</version>
     <packaging>pom</packaging>
 
     <name>Nova Platform Spring Boot Parent</name>
@@ -19,14 +19,32 @@
         <maven.compiler.target>${java.version}</maven.compiler.target>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <!-- Nova Platform -->
-        <nova-bom.version>0.1.0-SNAPSHOT</nova-bom.version>
-        <nova-starter.version>0.1.0-SNAPSHOT</nova-starter.version>
+        <nova-bom.version>1.0.0</nova-bom.version>
+        <nova-starter.version>1.0.1</nova-starter.version>
         <!-- Plugins -->
         <maven-compiler-plugin.version>3.14.0</maven-compiler-plugin.version>
         <maven-surefire-plugin.version>3.5.3</maven-surefire-plugin.version>
         <spring-boot-maven-plugin.version>4.0.5</spring-boot-maven-plugin.version>
     </properties>
 
+    <!-- Repositorios de lectura — GitHub Packages de otros repos Nova.
+         Requiere credenciales (GitHub Packages exige auth incluso en repos
+         publicos); ver settings.xml generado por nova-setup-java (server ids
+         "nova-packages-read-bom" / "nova-packages-read-starter", token
+         NOVA_PACKAGES_READ_TOKEN). Maven exige id unico por repository, por
+         eso son 2 ids distintos aunque compartan las mismas credenciales.
+         Heredado por todos los proyectos hijos que usen este parent. -->
+    <repositories>
+        <repository>
+            <id>nova-packages-read-bom</id>
+            <url>https://maven.pkg.github.com/ahincho/nova-bom</url>
+        </repository>
+        <repository>
+            <id>nova-packages-read-starter</id>
+            <url>https://maven.pkg.github.com/ahincho/nova-java-spring-boot-starter</url>
+        </repository>
+    </repositories>
+
     <!-- Gestión de dependencias — importa el BOM -->
     <dependencyManagement>
         <dependencies>
@@ -93,7 +111,7 @@
     <distributionManagement>
         <repository>
             <id>github</id>
-            <url>https://maven.pkg.github.com/OWNER/nova-spring-boot-parent</url>
+            <url>https://maven.pkg.github.com/ahincho/nova-java-spring-boot-parent</url>
         </repository>
     </distributionManagement>