Skip to content

docs(ospo): community health rollout v2 — README, agents.md, health files#434

Merged
DeepDiver1975 merged 1 commit into
masterfrom
ospo/community-health-v2
Jul 7, 2026
Merged

docs(ospo): community health rollout v2 — README, agents.md, health files#434
DeepDiver1975 merged 1 commit into
masterfrom
ospo/community-health-v2

Conversation

@dj4oC

@dj4oC dj4oC commented May 28, 2026

Copy link
Copy Markdown
Contributor

Summary

This PR is part of the Kiteworks OSPO community health rollout (kiteworks.com/opensource), applied to all ~110 public ownCloud repositories starting May 5, 2026.

  • README.md: Rewritten with v2 OSPO template
    • License-specific OSPO section with Apache 2.0 migration guidance
    • Mandatory Community & Support section: GitHub Discussions, Matrix, docs, enterprise support, OSPO home
    • Contributing workflow: Rebase Early/Often, Dependabot, PGP/GPG-signed commits, DCO sign-off, GitHub Actions policy
    • Security section pointing to security.owncloud.com + YesWeHack bug bounty
    • Translations link to Transifex (owncloud project)
  • agents.md (new): AI agent context file with architecture, build commands, OSPO policy constraints
  • CODE_OF_CONDUCT.md (new): Redirect to https://owncloud.com/contribute/code-of-conduct/
  • CONTRIBUTING.md (new): Redirect to https://owncloud.com/contribute/
  • SECURITY.md (new): Redirect to https://security.owncloud.com + YesWeHack
  • SUPPORT.md (new): Redirect to https://owncloud.com/contact-us/ and support channels

Test plan

  • README renders correctly on GitHub (badges, sections, links)
  • All health file links resolve (CODE_OF_CONDUCT, CONTRIBUTING, SECURITY, SUPPORT)
  • agents.md loads correctly in Claude Code and GitHub Copilot
  • License referenced in README matches actual LICENSE file in repo

🤖 Generated with Claude Code as part of the ownCloud OSPO rollout.
Kiteworks OSPO: https://kiteworks.com/opensource

@CLAassistant

CLAassistant commented May 28, 2026

Copy link
Copy Markdown

CLA assistant check
All committers have signed the CLA.

@dj4oC dj4oC requested review from DeepDiver1975 and kobergj May 28, 2026 08:05
@dj4oC dj4oC force-pushed the ospo/community-health-v2 branch from 1104a05 to f12962a Compare June 2, 2026 06:24
…iles

Introduced by the Kiteworks Open Source Program Office (OSPO) on May 5, 2026.

Changes:
- README.md: rewritten with OSPO v2 template — license-specific migration
  guidance, Community & Support section, Contributing workflow, Security
  section pointing to security.owncloud.com + YesWeHack bug bounty
- agents.md: AI agent context file with architecture, build commands, and
  OSPO Policy Constraints (GitHub Actions, Dependabot, Git Workflow)
- CODE_OF_CONDUCT.md: redirect to https://owncloud.com/contribute/code-of-conduct/
- CONTRIBUTING.md: redirect to https://owncloud.com/contribute/
- SECURITY.md: redirect to https://security.owncloud.com + YesWeHack
- SUPPORT.md: redirect to https://owncloud.com/contact-us/ + channels

OSPO: https://kiteworks.com/opensource

Signed-off-by: David Walter <david.walter@kiteworks.com>
@phil-davis phil-davis force-pushed the ospo/community-health-v2 branch from f12962a to d366a93 Compare July 6, 2026 21:46
@phil-davis phil-davis requested a review from a team as a code owner July 6, 2026 21:46
Comment thread README.md
## Part of ownCloud Classic (OC10)

```js
This app extends [ownCloud Server](https://github.com/owncloud/core) with in-browser text editing capabilities. It is shipped as part of the [ownCloud Server Docker image](https://hub.docker.com/r/owncloud/server).

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
This app extends [ownCloud Server](https://github.com/owncloud/core) with in-browser text editing capabilities. It is shipped as part of the [ownCloud Server Docker image](https://hub.docker.com/r/owncloud/server).
This app extends [ownCloud Classic Server](https://github.com/owncloud/core) with in-browser text editing capabilities. It is shipped as part of the [ownCloud Classic Server Docker image](https://hub.docker.com/r/owncloud/server).

@dj4oC dj4oC left a comment

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Documentation-only PR: rewrites README.md/CONTRIBUTING.md and adds CODE_OF_CONDUCT.md, SECURITY.md, SUPPORT.md, and agents.md as part of the ~110-repo Kiteworks OSPO community health rollout. No PHP, JS, or app runtime code is touched in files_texteditor.

Findings

Nothing blocking.

  • Security: No prompt-injection or hidden instructions found in agents.md or elsewhere; it explicitly reinforces security discipline (SHA-pinned GitHub Actions, verified sources, signed + DCO commits). The new SECURITY.md + bug-bounty section strengthens (not weakens) the vulnerability-reporting process. No secrets or suspicious/typosquatted URLs.
  • Stability: Install instructions and the agents.md build/test commands (make dist, make test-php-unit, make test-php-style) were checked against this repo's actual Makefile and paths — accurate, no copy-paste-from-template errors. Minor: the previous CI/SonarCloud quality badges and the "Preview apps" JS API doc section were dropped from README in favor of the generic OSPO template — worth a maintainer sanity check that no useful contributor-facing content was lost.
  • Performance: N/A — no runtime code changed.
  • Coverage: No PHPUnit/Playwright/WCAG requirement applies (no backend logic or in-app UI surface changed). Minor: the PR's own Test plan checklist is still all unchecked — consider ticking those off before merge.

Verdict

Commenting (no blocking issues; already has a MEMBER approval)

🤖 Automated review by Claude Code (security · stability · performance · coverage)


Generated by Claude Code

dj4oC commented Jul 7, 2026

Copy link
Copy Markdown
Contributor Author

This PR (docs/OSPO rollout) only modifies root-directory files (README.md, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, SUPPORT.md, agents.md) — no changes under apps/, js/, controller/, or tests/.

Per this routine's policy, root-directory edits are out of scope for automated review: commenting and stopping here. No security/stability/performance/coverage assessment was run since there is no application code in this diff.

A human maintainer should review and merge this at their discretion (note: it changes SECURITY.md reporting channels and contribution/licensing language, which is a governance decision, not a code-review one).

🤖 Automated review by Claude Code (security · stability · performance · coverage)


Generated by Claude Code

@DeepDiver1975 DeepDiver1975 merged commit b7a3caa into master Jul 7, 2026
14 checks passed
@DeepDiver1975 DeepDiver1975 deleted the ospo/community-health-v2 branch July 7, 2026 04:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants