diff --git a/.distignore b/.distignore
index 41c64ea..a791c55 100644
--- a/.distignore
+++ b/.distignore
@@ -7,6 +7,7 @@
 # Files
 /.distignore
 /.gitignore
+/.phpcs.xml.dist
 /.wp-env.json
 /composer.json
 /composer.lock
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ab3d8e1..a03f7fe 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -32,7 +32,7 @@ jobs:
     - name: WPCS check
       uses: 10up/wpcs-action@stable
       with:
-        standard: WordPress
+        standard: .phpcs.xml.dist
         paths: .
 
   plugin-check:
@@ -52,3 +52,7 @@ jobs:
         uses: wordpress/plugin-check-action@v1.1.6
         with:
           wp-version: "latest"
+          # Development-only files that ship excluded via .distignore but are
+          # present in the CI checkout; skip them so Plugin Check doesn't flag
+          # them as hidden/application files.
+          exclude-files: .wp-env.json,.phpcs.xml.dist
diff --git a/.phpcs.xml.dist b/.phpcs.xml.dist
new file mode 100644
index 0000000..ceed9de
--- /dev/null
+++ b/.phpcs.xml.dist
@@ -0,0 +1,41 @@
+<?xml version="1.0"?>
+<ruleset name="Plugin Report">
+	<description>Coding standards for the Plugin Report plugin.</description>
+
+	<!-- Show sniff codes and progress; the CI workflow passes the path to scan. -->
+	<arg value="ps"/>
+	<arg name="extensions" value="php"/>
+
+	<!-- Directories that don't need linting. -->
+	<exclude-pattern>/vendor/*</exclude-pattern>
+	<exclude-pattern>/node_modules/*</exclude-pattern>
+
+	<rule ref="WordPress">
+		<!--
+		The plugin ships as a single bootstrap file named after the plugin
+		(rt-plugin-report.php). Renaming it to class-*.php would break the
+		plugin entry point, so the class-file naming rule does not apply.
+		-->
+		<exclude name="WordPress.Files.FileName.InvalidClassFileName"/>
+	</rule>
+
+	<!-- Recognise the plugin's text domain. -->
+	<rule ref="WordPress.WP.I18n">
+		<properties>
+			<property name="text_domain" type="array">
+				<element value="plugin-report"/>
+			</property>
+		</properties>
+	</rule>
+
+	<!-- Recognise the plugin's global prefixes. -->
+	<rule ref="WordPress.NamingConventions.PrefixAllGlobals">
+		<properties>
+			<property name="prefixes" type="array">
+				<element value="RT_Plugin_Report"/>
+				<element value="rt_plugin_report"/>
+				<element value="plugin_report"/>
+			</property>
+		</properties>
+	</rule>
+</ruleset>
diff --git a/rt-plugin-report.php b/rt-plugin-report.php
index 6edaafc..d2fe0ae 100644
--- a/rt-plugin-report.php
+++ b/rt-plugin-report.php
@@ -464,14 +464,12 @@ private function render_table_row( $report ) {
 							// Plugin is available on wp.org.
 							$html .= '<td class="' . esc_attr( self::CSS_CLASS_LOW ) . '">wordpress.org</td>';
 						}
+					} elseif ( $parsed_repo_url && isset( $parsed_repo_url['host'] ) ) {
+						// Update URI is a valid URL, display the host.
+						$html .= '<td class="' . esc_attr( self::CSS_CLASS_MED ) . '">' . esc_html( $repo_host ) . '</td>';
 					} else {
-						if ( $parsed_repo_url && isset( $parsed_repo_url['host'] ) ) { // phpcs:ignore Universal.ControlStructures.DisallowLonelyIf.Found
-							// Update URI is a valid URL, display the host.
-							$html .= '<td class="' . esc_attr( self::CSS_CLASS_MED ) . '">' . esc_html( $repo_host ) . '</td>';
-						} else {
-							// Some other value (like 'false'), so assume updates are disabled.
-							$html .= '<td class="' . esc_attr( self::CSS_CLASS_MED ) . '">' . esc_html__( 'Updates disabled', 'plugin-report' ) . '</td>';
-						}
+						// Some other value (like 'false'), so assume updates are disabled.
+						$html .= '<td class="' . esc_attr( self::CSS_CLASS_MED ) . '">' . esc_html__( 'Updates disabled', 'plugin-report' ) . '</td>';
 					}
 				} elseif ( version_compare( $wp_version, '5.8', '<' ) ) {
 					$html .= $this->render_error_cell( esc_html__( 'Only available in WP 5.8+', 'plugin-report' ) );
@@ -531,12 +529,10 @@ private function render_table_row( $report ) {
 				// Auto-update.
 				if ( version_compare( $wp_version, '5.5', '<' ) ) {
 					$html .= '<td>' . esc_html__( 'Requires WordPress 5.5 or higher', 'plugin-report' ) . '</td>';
+				} elseif ( isset( $report['auto-update'] ) && $report['auto-update'] ) {
+					$html .= '<td class="' . esc_attr( self::CSS_CLASS_LOW ) . '">' . esc_html__( 'Enabled', 'plugin-report' ) . '</td>';
 				} else {
-					if ( isset( $report['auto-update'] ) && $report['auto-update'] ) { // phpcs:ignore Universal.ControlStructures.DisallowLonelyIf.Found
-						$html .= '<td class="' . esc_attr( self::CSS_CLASS_LOW ) . '">' . esc_html__( 'Enabled', 'plugin-report' ) . '</td>';
-					} else {
-						$html .= '<td>' . esc_html__( 'Not enabled', 'plugin-report' ) . '</td>';
-					}
+					$html .= '<td>' . esc_html__( 'Not enabled', 'plugin-report' ) . '</td>';
 				}
 
 				// Last updates.