From 1b07da75f76a8357b67d9062b8f566fc137f5ad9 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 11 Apr 2026 14:33:03 +0000
Subject: [PATCH 1/3] Initial plan


From 39470213fe6ddb36cd0e4aa9c1cc268c1b33bdd1 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 11 Apr 2026 14:34:31 +0000
Subject: [PATCH 2/3] Initialize Homebrew tap repository scaffolding

Agent-Logs-Url: https://github.com/coreruleset/homebrew-tap/sessions/1f7adb20-d5f0-4df9-8a17-96711c7cacb5

Co-authored-by: fzipi <3012076+fzipi@users.noreply.github.com>
---
 .github/workflows/test.yml | 31 ++++++++++++++++++++++++++++
 Casks/.gitkeep             |  0
 Formula/.gitkeep           |  0
 README.md                  | 42 +++++++++++++++++++++++++++++++++++++-
 4 files changed, 72 insertions(+), 1 deletion(-)
 create mode 100644 .github/workflows/test.yml
 create mode 100644 Casks/.gitkeep
 create mode 100644 Formula/.gitkeep

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
new file mode 100644
index 0000000..e7775bf
--- /dev/null
+++ b/.github/workflows/test.yml
@@ -0,0 +1,31 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  audit:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Homebrew
+        uses: homebrew/actions/setup-homebrew@master
+
+      - name: Audit and style-check casks
+        run: |
+          shopt -s nullglob
+          casks=(Casks/*.rb)
+          if [[ ${#casks[@]} -eq 0 ]]; then
+            echo "No cask files found, skipping audit."
+            exit 0
+          fi
+          brew audit --cask "${casks[@]}"
+          brew style "${casks[@]}"
diff --git a/Casks/.gitkeep b/Casks/.gitkeep
new file mode 100644
index 0000000..e69de29
diff --git a/Formula/.gitkeep b/Formula/.gitkeep
new file mode 100644
index 0000000..e69de29
diff --git a/README.md b/README.md
index 61c8cb5..8e0e1fb 100644
--- a/README.md
+++ b/README.md
@@ -1,2 +1,42 @@
 # homebrew-tap
-Official Homebrew tap for OWASP CRS tools (crs-toolchain and related utilities).
+
+Official Homebrew tap for OWASP CRS tools.
+
+This tap provides Homebrew cask formulae for [crs-toolchain](https://github.com/coreruleset/crs-toolchain) and other OWASP CRS utilities. Cask formulae are automatically updated via [GoReleaser](https://goreleaser.com/) on each release of `crs-toolchain` or other tools in the OWASP CRS organisation.
+
+## Installation
+
+Add this tap to Homebrew:
+
+```sh
+brew tap coreruleset/tap
+```
+
+Then install a tool, for example `crs-toolchain`:
+
+```sh
+brew install --cask crs-toolchain
+```
+
+## Upgrade
+
+```sh
+brew upgrade --cask crs-toolchain
+```
+
+## Uninstall
+
+```sh
+brew uninstall --cask crs-toolchain
+```
+
+To also remove the tap:
+
+```sh
+brew untap coreruleset/tap
+```
+
+## Links
+
+- [crs-toolchain repository](https://github.com/coreruleset/crs-toolchain)
+- [OWASP CRS project site](https://coreruleset.org)

From 32fef6328767cb8ec664c4816c56624a8d2d94be Mon Sep 17 00:00:00 2001
From: Felipe Zipitria <felipe.zipitria@owasp.org>
Date: Sat, 11 Apr 2026 11:37:29 -0300
Subject: [PATCH 3/3] ci: pin versions + renovatebot config

Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
---
 .github/workflows/test.yml | 4 ++--
 renovate.json              | 7 +++++++
 2 files changed, 9 insertions(+), 2 deletions(-)
 create mode 100644 renovate.json

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index e7775bf..7da2220 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -14,10 +14,10 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # ratchet:actions/checkout@v6
 
       - name: Set up Homebrew
-        uses: homebrew/actions/setup-homebrew@master
+        uses: homebrew/actions/setup-homebrew@59e6b20d96df1a3c9ccb0aa402676e01a4cc6ff3 # ratchet:homebrew/actions/setup-homebrew@master
 
       - name: Audit and style-check casks
         run: |
diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..eae6e7b
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,7 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "github>coreruleset/renovate-config",
+    "schedule:weekly"
+  ]
+}