chore: point MSD at git.golem15.com/golem15/msd-core
Some checks failed
Tests / PR mergeability (push) Successful in 1m37s
Tests / Base branch health (push) Successful in 11s
Tests / Detect test scope (push) Successful in 17s
Tests / lint-tests (push) Failing after 2m16s
Tests / plugin-validate (push) Successful in 1m6s
Tests / test (ubuntu-latest, 24, shard 1/3) (push) Failing after 25s
Tests / test (ubuntu-latest, 24, shard 2/3) (push) Failing after 20s
Tests / test (ubuntu-latest, 24, shard 3/3) (push) Failing after 20s
Tests / test (ubuntu-latest, 24) (push) Failing after 19s
Tests / test (inert CI) (push) Has been skipped
Tests / QA loop walk (smell ratchet) (push) Failing after 19s
Tests / Coverage gate (merged shards) (push) Has been skipped
Tests / Publish emitted-baseline artifact (push) Has been skipped
Dismiss Unauthorized PR Approvals / dismiss-unauthorized-approval (push) Successful in 9s
Close Draft PRs (sweep) / Sweep open draft PRs (push) Successful in 8s
Tests / conformance test (macos-latest, 24) (push) Has been cancelled
Tests / conformance test (windows-latest, 24, shard 1/3) (push) Has been cancelled
Tests / conformance test (windows-latest, 24, shard 2/3) (push) Has been cancelled
Tests / conformance test (windows-latest, 24, shard 3/3) (push) Has been cancelled
Tests / Required tests (push) Has been cancelled

The fork lives on the golem15 Gitea forge, not GitHub. Package identity now
parses either host and derives in-place raw URLs for Gitea; the identity-drift
lint accepts the new host; README drops GitHub-only badges and the npm
quickstart in favour of the checkout installer.
This commit is contained in:
Jakub Zych
2026-10-06 10:41:56 +02:00
parent a9a7a328e6
commit 12ee75a509
56 changed files with 182 additions and 172 deletions

View File

@@ -12,7 +12,7 @@
### Repos in scope
All active, non-archived repositories under the `open-gsd` GitHub organization,
beginning with the pilot repo `golem15com/msd-core`.
beginning with the pilot repo `golem15/msd-core`.
### Out of scope
@@ -26,7 +26,7 @@ beginning with the pilot repo `golem15com/msd-core`.
This section defines the mandatory security controls for every in-scope repo.
Each control links to the PR that implements it in the pilot repo
(`golem15com/msd-core`). Sibling repos adopt the same controls during
(`golem15/msd-core`). Sibling repos adopt the same controls during
Phase 2 rollout (§ 6).
### 2.1 Dependency integrity
@@ -299,7 +299,7 @@ If private advisory filing is unavailable, contact the open-gsd maintainers and
```text
Title: [Short description, e.g., "Secret exposed in CI log for PR #NNN"]
Affected repo: golem15com/msd-core (or sibling repo name)
Affected repo: golem15/msd-core (or sibling repo name)
Affected ver: [npm version range, e.g., "<=1.42.3" or "all versions"]
Reporter: [Your name / handle, or "Anonymous"]
Date found: YYYY-MM-DD
@@ -388,7 +388,7 @@ Responsibilities:
| Step | Detail |
|---|---|
| 1 | Requester opens a GitHub issue in `golem15com/msd-core` tagged `security-exception` |
| 1 | Requester opens a GitHub issue in `golem15/msd-core` tagged `security-exception` |
| 2 | Issue describes: which control, why the exception is needed, proposed compensating control |
| 3 | One maintainer approves the exception in the issue thread |
| 4 | Exception is time-limited: maximum 90 days. Requester must file a renewal or close the issue. |
@@ -398,7 +398,7 @@ Responsibilities:
## 6. Rollout plan
### Phase 1 — Pilot: `golem15com/msd-core` (in progress)
### Phase 1 — Pilot: `golem15/msd-core` (in progress)
| Item | Status | Owner | Target date | Exit criteria |
|---|---|---|---|---|