Audit Debt #166

	# Weekly full-tree audit debt sweep.
	#
	# Pull requests and rolling releases own blocking quality checks. This workflow
	# is deliberately advisory: it discovers repo-wide structural debt and keeps
	# one deduplicated tracking issue per finding kind without taxing every merge.

	name: Audit Debt

	on:
	schedule:
	- cron: '0 7 * * 1'
	workflow_dispatch:
	inputs:
	profile:
	description: 'Audit profile to run (full = all discovery detectors).'
	required: false
	default: 'full'

	concurrency:
	group: audit-debt
	cancel-in-progress: true

	permissions:
	contents: read
	issues: write

	jobs:
	full-audit:
	name: Full-tree audit -> tracking issues
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v6
	with:
	fetch-depth: 0

	- name: Check out Homeboy Action
	uses: actions/checkout@v6
	with:
	repository: Extra-Chill/homeboy-action
	ref: v2
	path: .homeboy-action

	- name: Generate GitHub App token
	id: app-token
	uses: actions/create-github-app-token@v3
	continue-on-error: true
	with:
	client-id: ${{ secrets.HOMEBOY_APP_ID }}
	private-key: ${{ secrets.HOMEBOY_APP_PRIVATE_KEY }}

	- uses: ./.homeboy-action
	with:
	source: .
	component: homeboy
	commands: review audit
	args: --profile=${{ github.event.inputs.profile \|\| 'full' }}
	auto-issue: 'true'
	app-token: ${{ steps.app-token.outputs.token \|\| '' }}

Navigation Menu