From bfd02c614264054c8cb9d5237e8424c7a87f9984 Mon Sep 17 00:00:00 2001
From: Chris Huber <chubes@extrachill.com>
Date: Tue, 3 Mar 2026 16:06:00 +0000
Subject: [PATCH 1/3] Add Homeboy CI workflow for automated PR lint and test

Uses Extra-Chill/homeboy-action@v1 to run homeboy lint and test
on every pull request. WordPress extension with SQLite for tests.
---
 .github/workflows/homeboy.yml | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 .github/workflows/homeboy.yml

diff --git a/.github/workflows/homeboy.yml b/.github/workflows/homeboy.yml
new file mode 100644
index 00000000..c2b62500
--- /dev/null
+++ b/.github/workflows/homeboy.yml
@@ -0,0 +1,23 @@
+name: Homeboy
+
+on:
+  pull_request:
+    branches: [main]
+
+jobs:
+  homeboy:
+    name: Lint & Test
+    runs-on: ubuntu-latest
+    env:
+      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: Extra-Chill/homeboy-action@v1
+        with:
+          extension: wordpress
+          commands: lint,test
+          component: data-machine
+          settings: '{"database_type": "sqlite"}'
+          php-version: '8.2'
+          node-version: '20'

From 859daa0ef71229e1919c9d06bd60b1ee62fdc66e Mon Sep 17 00:00:00 2001
From: Chris Huber <chubes@extrachill.com>
Date: Tue, 3 Mar 2026 16:08:42 +0000
Subject: [PATCH 2/3] Fix homeboy.json: rename modules to extensions (current
 convention)

---
 homeboy.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/homeboy.json b/homeboy.json
index 9dd9b9e7..9b9712ad 100644
--- a/homeboy.json
+++ b/homeboy.json
@@ -1,5 +1,5 @@
 {
-  "modules": {
+  "extensions": {
     "wordpress": {}
   },
   "version_targets": [

From 0eb3bd7e7c4da9f7d04721523d8f654da4da94df Mon Sep 17 00:00:00 2001
From: Chris Huber <chubes@extrachill.com>
Date: Tue, 3 Mar 2026 16:34:58 +0000
Subject: [PATCH 3/3] Add audit to CI workflow and grant PR write permission

---
 .github/workflows/homeboy.yml | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/homeboy.yml b/.github/workflows/homeboy.yml
index c2b62500..c7c6be8f 100644
--- a/.github/workflows/homeboy.yml
+++ b/.github/workflows/homeboy.yml
@@ -4,19 +4,21 @@ on:
   pull_request:
     branches: [main]
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   homeboy:
-    name: Lint & Test
+    name: Lint, Test & Audit
     runs-on: ubuntu-latest
-    env:
-      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - uses: actions/checkout@v4
 
       - uses: Extra-Chill/homeboy-action@v1
         with:
           extension: wordpress
-          commands: lint,test
+          commands: lint,test,audit
           component: data-machine
           settings: '{"database_type": "sqlite"}'
           php-version: '8.2'