diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml index 268529c..c652af4 100644 --- a/.github/workflows/cla.yml +++ b/.github/workflows/cla.yml @@ -45,10 +45,10 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: path-to-signatures: "signatures/cla.json" - path-to-document: "https://github.com/bkd-dotcom/umbra-github-app/blob/main/CLA.md" + path-to-document: "https://github.com/Signetry/github-app/blob/main/CLA.md" branch: "cla-signatures" allowlist: "dependabot[bot],bkd-dotcom" - custom-notsigned-prcomment: "Thanks for your contribution! Before it can be merged, please read the **[Contributor License Agreement](https://github.com/bkd-dotcom/umbra-github-app/blob/main/CLA.md)** — Umbra is **All Rights Reserved**, and by signing you assign copyright/ownership of your contribution to the Owner (you may not use, sell, or commercialize it yourself). To agree, reply with exactly:" + custom-notsigned-prcomment: "Thanks for your contribution! Before it can be merged, please read the **[Contributor License Agreement](https://github.com/Signetry/github-app/blob/main/CLA.md)** — Umbra is **All Rights Reserved**, and by signing you assign copyright/ownership of your contribution to the Owner (you may not use, sell, or commercialize it yourself). To agree, reply with exactly:" custom-pr-sign-comment: "I have read the CLA Document and I hereby sign the CLA" custom-allsigned-prcomment: "All contributors have signed the CLA. ✅" lock-pullrequest-aftermerge: false diff --git a/.github/workflows/reviewer.yml b/.github/workflows/reviewer.yml index b0e58db..99ee6f8 100644 --- a/.github/workflows/reviewer.yml +++ b/.github/workflows/reviewer.yml @@ -3,7 +3,7 @@ name: Reviewer # Advisory PR review (umbra-reviewer): surfaces architecture + security issues # and posts one recommendation comment. Advisory only — it never merges and never # fails the PR. Changes to security-sensitive surfaces (workflows, packaging) are -# escalated to a human. See https://github.com/bkd-dotcom/umbra-reviewer +# escalated to a human. See https://github.com/Signetry/reviewer on: pull_request: @@ -24,7 +24,7 @@ jobs: python-version: "3.12" - name: Install umbra-reviewer # source-available (All Rights Reserved); install from source, not PyPI. - run: pip install "umbra-reviewer @ git+https://github.com/bkd-dotcom/umbra-reviewer@v0.1.1" + run: pip install "umbra-reviewer @ git+https://github.com/Signetry/reviewer@v0.1.1" - name: Compute the PR diff env: BASE_SHA: ${{ github.event.pull_request.base.sha }} diff --git a/README.md b/README.md index fe4821b..7b4dc71 100644 --- a/README.md +++ b/README.md @@ -10,8 +10,8 @@ Install once on an account or org (pick repos in GitHub's own UI) and every new pull request gets one advisory **Admission Decision** comment — verdict, reasons, and a link to the signed receipt. **Comment-only; Umbra never merges.** -Part of the [Umbra platform](https://github.com/bkd-dotcom/umbra-umbrella). -Governance logic lives in [umbra-core](https://github.com/bkd-dotcom/umbra-core); +Part of the [Umbra platform](https://github.com/Signetry/signetry). +Governance logic lives in [umbra-core](https://github.com/Signetry/core); the App is served by the hosted [`umbra`](https://github.com/bkd-dotcom/umbra) service. This repository is the App's **public home**: its manifest, setup docs, and configuration — not a second copy of the governance pipeline. @@ -45,7 +45,7 @@ Full operator setup (secrets, Cloud Run): [SETUP.md](SETUP.md). - Governance is `umbra-core`; this repo carries no policy logic. See [SECURITY.md](SECURITY.md) · -[umbrella overview](https://github.com/bkd-dotcom/umbra-umbrella). +[umbrella overview](https://github.com/Signetry/signetry). ## License diff --git a/SECURITY.md b/SECURITY.md index 031fdfb..f6e9e40 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,14 +1,14 @@ # Security policy The Umbra GitHub App is served by the hosted [`umbra`](https://github.com/bkd-dotcom/umbra) -service and governed by [umbra-core](https://github.com/bkd-dotcom/umbra-core). +service and governed by [umbra-core](https://github.com/Signetry/core). This repo holds the App's manifest and setup docs only. ## Reporting Open a private security advisory on the relevant repository (`umbra` for the hosted webhook/token handling, `umbra-core` for governance), or use the umbrella contact: -. Do not open a public issue for an +. Do not open a public issue for an unpatched vulnerability. ## Guarantees