docs(ospo): community health rollout v2 — README, agents.md, health files#1556
docs(ospo): community health rollout v2 — README, agents.md, health files#1556dj4oC wants to merge 1 commit into
Conversation
|
|
…iles Introduced by the Kiteworks Open Source Program Office (OSPO) on May 5, 2026. Changes: - README.md: rewritten with OSPO v2 template — license-specific migration guidance, Community & Support section, Contributing workflow, Security section pointing to security.owncloud.com + YesWeHack bug bounty - agents.md: AI agent context file with architecture, build commands, and OSPO Policy Constraints (GitHub Actions, Dependabot, Git Workflow) - CODE_OF_CONDUCT.md: redirect to https://owncloud.com/contribute/code-of-conduct/ - CONTRIBUTING.md: redirect to https://owncloud.com/contribute/ - SECURITY.md: redirect to https://security.owncloud.com + YesWeHack - SUPPORT.md: redirect to https://owncloud.com/contact-us/ + channels OSPO: https://kiteworks.com/opensource Signed-off-by: David Walter <david.walter@kiteworks.com>
abadce5 to
dafdffa
Compare
dj4oC
left a comment
dj4oC
left a comment
There was a problem hiding this comment.
Adds OSPO-managed community health files (README rewrite, agents.md, CODE_OF_CONDUCT.md, SECURITY.md, SUPPORT.md, CONTRIBUTING.md rewrite) as part of the org-wide Kiteworks OSPO rollout.
Findings
No security/stability/performance surface — this is a docs-only change.
Compliance (REUSE 3.3): the three new files (CODE_OF_CONDUCT.md, SECURITY.md, agents.md) carry no SPDX license/copyright header, and this repo has no .reuse/dep5 or REUSE.toml to cover them by path instead. See inline suggestions.
Note: this PR is opened from this same automation's account, so GitHub does not permit an Approve/Request-changes verdict here — submitting as a comment-only review. A human maintainer should treat the REUSE finding above as the actionable item before merge.
Note
Build verification skipped (Xcode not available in cloud review environment). Code analysis only.
Verdict
Commenting (compliance finding — REUSE 3.3 header gap on 3 new files; cannot self-approve/request-changes on own PR)
🤖 Automated review by Claude Code (security · stability · performance · coverage)
Generated by Claude Code
| @@ -0,0 +1,8 @@ | |||
| # Code of Conduct | |||
There was a problem hiding this comment.
REUSE 3.3: this new file has no SPDX license/copyright header, and the repo has no .reuse/dep5/REUSE.toml covering docs by path. Suggest an SPDX header so this file has explicit REUSE coverage.
| # Code of Conduct | |
| <!-- | |
| SPDX-FileCopyrightText: 2026 ownCloud GmbH <https://owncloud.com> | |
| SPDX-License-Identifier: GPL-3.0-only | |
| --> | |
| # Code of Conduct |
Generated by Claude Code
| @@ -0,0 +1,11 @@ | |||
| # Security Policy | |||
There was a problem hiding this comment.
Same REUSE 3.3 gap as CODE_OF_CONDUCT.md — no SPDX header and no dep5/REUSE.toml coverage for this new file.
| # Security Policy | |
| <!-- | |
| SPDX-FileCopyrightText: 2026 ownCloud GmbH <https://owncloud.com> | |
| SPDX-License-Identifier: GPL-3.0-only | |
| --> | |
| # Security Policy |
Generated by Claude Code
| @@ -0,0 +1,68 @@ | |||
| # agents.md -- ownCloud iOS App | |||
There was a problem hiding this comment.
Same REUSE 3.3 gap — new file, no SPDX header, no dep5/REUSE.toml coverage.
| # agents.md -- ownCloud iOS App | |
| <!-- | |
| SPDX-FileCopyrightText: 2026 ownCloud GmbH <https://owncloud.com> | |
| SPDX-License-Identifier: GPL-3.0-only | |
| --> | |
| # agents.md -- ownCloud iOS App |
Generated by Claude Code
🤖 Automated review by Claude Code (security · stability · performance · coverage) Generated by Claude Code |
🤖 Automated review by Claude Code (security · stability · performance · coverage) Generated by Claude Code |
3 participants
Summary
This PR is part of the Kiteworks OSPO community health rollout (kiteworks.com/opensource), applied to all ~110 public ownCloud repositories starting May 5, 2026.
Test plan
🤖 Generated with Claude Code as part of the ownCloud OSPO rollout.
Kiteworks OSPO: https://kiteworks.com/opensource