zmaril/Powderworks Housekeeping

Check a repo is in good order: branch protection, CI, dependabot, lockfiles, README, license. Snobby yet configurable.

Trust Signals

name	description	required	default
token	Token for API reads. Defaults to the workflow token, which cannot see some admin-level settings (vulnerability alerts, secret scanning, workflow permissions) — those checks skip with a note. Pass a fine-grained PAT with read-only Administration scope for full coverage.	—	${{ github.token }}
only	Comma-separated subset of checks to run (default all).	—	""
captain	Path to a housecaptain.toml fleet manifest. When set, runs the captain delegation check (is every fleet member auditing itself?) instead of auditing this repo.	—	""
dispatch	With captain: also trigger every member's self-audit now, so new checks reach the fleet immediately instead of waiting for weekly crons. Requires a token with actions:write on the members.	—	""
sync-configs	With captain: push fleet-owned managed configs (stylelint, vale, …) to members as isolated PRs when they drift from the canonical copies under .fleet/. Requires a token with contents:write + pull_requests:write on the members. Pair with an on.push path filter for .fleet/** so a config change fans out on merge.	—	""

no outputs