swapping to internal references

cmd/app/createca.go

@@ -29,7 +29,7 @@ import (
 	"time"
 
 	"github.com/ThalesIgnite/crypto11"
-	"github.com/sigstore/fulcio/pkg/log"
+	"github.com/securesign/fulcio/pkg/log"
 	"github.com/sigstore/sigstore/pkg/cryptoutils"
 	"github.com/spf13/cobra"
 	"github.com/spf13/viper"

cmd/app/createcanocgo.go

@@ -19,7 +19,7 @@
 package app
 
 import (
-	"github.com/sigstore/fulcio/pkg/log"
+	"github.com/securesign/fulcio/pkg/log"
 	"github.com/spf13/cobra"
 )
 

cmd/app/grpc.go

@@ -34,13 +34,13 @@ import (
 	grpc_recovery "github.com/grpc-ecosystem/go-grpc-middleware/recovery"
 	grpc_prometheus "github.com/grpc-ecosystem/go-grpc-prometheus"
 	"github.com/prometheus/client_golang/prometheus"
-	"github.com/sigstore/fulcio/pkg/ca"
-	"github.com/sigstore/fulcio/pkg/config"
-	gw "github.com/sigstore/fulcio/pkg/generated/protobuf"
-	gw_legacy "github.com/sigstore/fulcio/pkg/generated/protobuf/legacy"
-	"github.com/sigstore/fulcio/pkg/identity"
-	"github.com/sigstore/fulcio/pkg/log"
-	"github.com/sigstore/fulcio/pkg/server"
+	"github.com/securesign/fulcio/pkg/ca"
+	"github.com/securesign/fulcio/pkg/config"
+	gw "github.com/securesign/fulcio/pkg/generated/protobuf"
+	gw_legacy "github.com/securesign/fulcio/pkg/generated/protobuf/legacy"
+	"github.com/securesign/fulcio/pkg/identity"
+	"github.com/securesign/fulcio/pkg/log"
+	"github.com/securesign/fulcio/pkg/server"
 	"github.com/spf13/viper"
 	"google.golang.org/grpc"
 	"google.golang.org/grpc/credentials"

cmd/app/http.go

@@ -32,10 +32,10 @@ import (
 	"github.com/grpc-ecosystem/grpc-gateway/v2/runtime"
 	"github.com/prometheus/client_golang/prometheus/promhttp"
 	"github.com/rs/cors"
-	gw "github.com/sigstore/fulcio/pkg/generated/protobuf"
-	legacy_gw "github.com/sigstore/fulcio/pkg/generated/protobuf/legacy"
-	"github.com/sigstore/fulcio/pkg/log"
-	"github.com/sigstore/fulcio/pkg/server"
+	gw "github.com/securesign/fulcio/pkg/generated/protobuf"
+	legacy_gw "github.com/securesign/fulcio/pkg/generated/protobuf/legacy"
+	"github.com/securesign/fulcio/pkg/log"
+	"github.com/securesign/fulcio/pkg/server"
 	"github.com/spf13/viper"
 	"google.golang.org/grpc"
 	"google.golang.org/grpc/credentials"

cmd/app/http_test.go

@@ -30,8 +30,8 @@ import (
 	"sync"
 	"testing"
 
-	"github.com/sigstore/fulcio/pkg/ca"
-	"github.com/sigstore/fulcio/pkg/identity"
+	"github.com/securesign/fulcio/pkg/ca"
+	"github.com/securesign/fulcio/pkg/identity"
 	"github.com/spf13/viper"
 
 	"google.golang.org/grpc"

cmd/app/root.go

@@ -21,7 +21,7 @@ import (
 
 	"github.com/spf13/cobra"
 
-	"github.com/sigstore/fulcio/pkg/log"
+	"github.com/securesign/fulcio/pkg/log"
 )
 
 // rootCmd represents the base command when called without any subcommands

cmd/app/serve.go

@@ -43,19 +43,19 @@ import (
 	"github.com/grpc-ecosystem/grpc-gateway/v2/runtime"
 	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/client_golang/prometheus/promhttp"
-	certauth "github.com/sigstore/fulcio/pkg/ca"
-	"github.com/sigstore/fulcio/pkg/ca/ephemeralca"
-	"github.com/sigstore/fulcio/pkg/ca/fileca"
-	googlecav1 "github.com/sigstore/fulcio/pkg/ca/googleca/v1"
-	"github.com/sigstore/fulcio/pkg/ca/kmsca"
-	"github.com/sigstore/fulcio/pkg/ca/pkcs11ca"
-	"github.com/sigstore/fulcio/pkg/ca/tinkca"
-	"github.com/sigstore/fulcio/pkg/config"
-	"github.com/sigstore/fulcio/pkg/generated/protobuf"
-	"github.com/sigstore/fulcio/pkg/generated/protobuf/legacy"
-	"github.com/sigstore/fulcio/pkg/identity"
-	"github.com/sigstore/fulcio/pkg/log"
-	"github.com/sigstore/fulcio/pkg/server"
+	certauth "github.com/securesign/fulcio/pkg/ca"
+	"github.com/securesign/fulcio/pkg/ca/ephemeralca"
+	"github.com/securesign/fulcio/pkg/ca/fileca"
+	googlecav1 "github.com/securesign/fulcio/pkg/ca/googleca/v1"
+	"github.com/securesign/fulcio/pkg/ca/kmsca"
+	"github.com/securesign/fulcio/pkg/ca/pkcs11ca"
+	"github.com/securesign/fulcio/pkg/ca/tinkca"
+	"github.com/securesign/fulcio/pkg/config"
+	"github.com/securesign/fulcio/pkg/generated/protobuf"
+	"github.com/securesign/fulcio/pkg/generated/protobuf/legacy"
+	"github.com/securesign/fulcio/pkg/identity"
+	"github.com/securesign/fulcio/pkg/log"
+	"github.com/securesign/fulcio/pkg/server"
 	"github.com/sigstore/sigstore/pkg/cryptoutils"
 	"github.com/spf13/cobra"
 	"github.com/spf13/pflag"

cmd/app/serve_test.go

@@ -27,10 +27,10 @@ import (
 	"time"
 
 	"github.com/google/go-cmp/cmp"
-	"github.com/sigstore/fulcio/pkg/api"
-	"github.com/sigstore/fulcio/pkg/ca/ephemeralca"
-	"github.com/sigstore/fulcio/pkg/config"
-	"github.com/sigstore/fulcio/pkg/generated/protobuf"
+	"github.com/securesign/fulcio/pkg/api"
+	"github.com/securesign/fulcio/pkg/ca/ephemeralca"
+	"github.com/securesign/fulcio/pkg/config"
+	"github.com/securesign/fulcio/pkg/generated/protobuf"
 	"google.golang.org/grpc"
 	"google.golang.org/grpc/credentials/insecure"
 )

cmd/create_tink_keyset/create_tink_keyset.go

@@ -23,7 +23,7 @@ import (
 
 	"github.com/google/tink/go/keyset"
 	"github.com/google/tink/go/signature"
-	"github.com/sigstore/fulcio/pkg/ca/tinkca"
+	"github.com/securesign/fulcio/pkg/ca/tinkca"
 )
 
 /*

cmd/fetch_ca_cert/fetch_ca_cert.go

@@ -29,7 +29,7 @@ import (
 	privateca "cloud.google.com/go/security/privateca/apiv1"
 	"cloud.google.com/go/security/privateca/apiv1/privatecapb"
 	"github.com/google/tink/go/keyset"
-	"github.com/sigstore/fulcio/pkg/ca/tinkca"
+	"github.com/securesign/fulcio/pkg/ca/tinkca"
 	"github.com/sigstore/sigstore/pkg/cryptoutils"
 	"google.golang.org/protobuf/types/known/durationpb"
 

examples/request-certificate/main.go

@@ -26,7 +26,7 @@ import (
 	"log"
 	"net/url"
 
-	fulciopb "github.com/sigstore/fulcio/pkg/generated/protobuf"
+	fulciopb "github.com/securesign/fulcio/pkg/generated/protobuf"
 	"github.com/sigstore/sigstore/pkg/cryptoutils"
 	"github.com/sigstore/sigstore/pkg/oauthflow"
 	"github.com/sigstore/sigstore/pkg/signature"

federation/main.go

@@ -20,7 +20,7 @@ import (
 	"os"
 	"path/filepath"
 
-	"github.com/sigstore/fulcio/pkg/config"
+	"github.com/securesign/fulcio/pkg/config"
 	"gopkg.in/yaml.v3"
 )
 

go.mod

@@ -1,4 +1,4 @@
-module github.com/sigstore/fulcio
+module github.com/securesign/fulcio
 
 go 1.21
 

hack/tools/go.mod

@@ -1,4 +1,4 @@
-module github.com/sigstore/fulcio/hack/tools
+module github.com/securesign/fulcio/hack/tools
 
 go 1.20
 

main.go

@@ -18,7 +18,7 @@ package main
 import (
 	"context"
 
-	"github.com/sigstore/fulcio/cmd/app"
+	"github.com/securesign/fulcio/cmd/app"
 )
 
 func main() {

pkg/ca/baseca/baseca.go

@@ -26,8 +26,8 @@ import (
 	ct "github.com/google/certificate-transparency-go"
 	cttls "github.com/google/certificate-transparency-go/tls"
 	ctx509 "github.com/google/certificate-transparency-go/x509"
-	"github.com/sigstore/fulcio/pkg/ca"
-	"github.com/sigstore/fulcio/pkg/identity"
+	"github.com/securesign/fulcio/pkg/ca"
+	"github.com/securesign/fulcio/pkg/identity"
 )
 
 var (

pkg/ca/baseca/baseca_test.go

@@ -26,9 +26,9 @@ import (
 	"testing"
 
 	ct "github.com/google/certificate-transparency-go"
-	"github.com/sigstore/fulcio/pkg/ca"
-	"github.com/sigstore/fulcio/pkg/certificate"
-	"github.com/sigstore/fulcio/pkg/test"
+	"github.com/securesign/fulcio/pkg/ca"
+	"github.com/securesign/fulcio/pkg/certificate"
+	"github.com/securesign/fulcio/pkg/test"
 	"github.com/sigstore/sigstore/pkg/cryptoutils"
 	"github.com/sigstore/sigstore/pkg/signature"
 )

pkg/ca/ca.go

@@ -20,7 +20,7 @@ import (
 	"crypto"
 	"crypto/x509"
 
-	"github.com/sigstore/fulcio/pkg/identity"
+	"github.com/securesign/fulcio/pkg/identity"
 )
 
 // CertificateAuthority implements certificate creation with a detached SCT and

pkg/ca/common.go

@@ -22,7 +22,7 @@ import (
 	"errors"
 	"time"
 
-	"github.com/sigstore/fulcio/pkg/identity"
+	"github.com/securesign/fulcio/pkg/identity"
 	"github.com/sigstore/sigstore/pkg/cryptoutils"
 )
 

pkg/ca/common_test.go

@@ -24,7 +24,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/sigstore/fulcio/pkg/test"
+	"github.com/securesign/fulcio/pkg/test"
 	"github.com/sigstore/sigstore/pkg/signature"
 )
 

pkg/ca/embeddedca.go

@@ -20,7 +20,7 @@ import (
 	"crypto"
 
 	ct "github.com/google/certificate-transparency-go"
-	"github.com/sigstore/fulcio/pkg/identity"
+	"github.com/securesign/fulcio/pkg/identity"
 )
 
 // EmbeddedSCTCA implements precertificate and certificate issuance. Certificates will contain an embedded SCT.

pkg/ca/ephemeralca/ephemeral.go

@@ -21,8 +21,8 @@ import (
 	"crypto/x509/pkix"
 	"time"
 
-	"github.com/sigstore/fulcio/pkg/ca"
-	"github.com/sigstore/fulcio/pkg/ca/baseca"
+	"github.com/securesign/fulcio/pkg/ca"
+	"github.com/securesign/fulcio/pkg/ca/baseca"
 	"github.com/sigstore/sigstore/pkg/cryptoutils"
 	"github.com/sigstore/sigstore/pkg/signature"
 )

pkg/ca/fileca/fileca.go

@@ -20,8 +20,8 @@ import (
 	"crypto/x509"
 
 	"github.com/fsnotify/fsnotify"
-	"github.com/sigstore/fulcio/pkg/ca"
-	"github.com/sigstore/fulcio/pkg/ca/baseca"
+	"github.com/securesign/fulcio/pkg/ca"
+	"github.com/securesign/fulcio/pkg/ca/baseca"
 )
 
 type fileCA struct {

pkg/ca/fileca/load.go

@@ -23,7 +23,7 @@ import (
 	"os"
 	"path/filepath"
 
-	"github.com/sigstore/fulcio/pkg/ca"
+	"github.com/securesign/fulcio/pkg/ca"
 	"github.com/sigstore/sigstore/pkg/cryptoutils"
 	"go.step.sm/crypto/pemutil"
 )

pkg/ca/googleca/v1/googleca.go

@@ -30,8 +30,8 @@ import (
 
 	privateca "cloud.google.com/go/security/privateca/apiv1"
 	"cloud.google.com/go/security/privateca/apiv1/privatecapb"
-	"github.com/sigstore/fulcio/pkg/ca"
-	"github.com/sigstore/fulcio/pkg/identity"
+	"github.com/securesign/fulcio/pkg/ca"
+	"github.com/securesign/fulcio/pkg/identity"
 	"github.com/sigstore/sigstore/pkg/cryptoutils"
 	"google.golang.org/api/iterator"
 	"google.golang.org/api/option"

pkg/ca/googleca/v1/googleca_test.go

@@ -30,7 +30,7 @@ import (
 	"time"
 
 	"cloud.google.com/go/security/privateca/apiv1/privatecapb"
-	"github.com/sigstore/fulcio/pkg/challenges"
+	"github.com/securesign/fulcio/pkg/challenges"
 	"github.com/sigstore/sigstore/pkg/cryptoutils"
 	"google.golang.org/protobuf/proto"
 )

pkg/ca/kmsca/kmsca.go

@@ -20,8 +20,8 @@ import (
 	"crypto"
 	"crypto/x509"
 
-	"github.com/sigstore/fulcio/pkg/ca"
-	"github.com/sigstore/fulcio/pkg/ca/baseca"
+	"github.com/securesign/fulcio/pkg/ca"
+	"github.com/securesign/fulcio/pkg/ca/baseca"
 	"github.com/sigstore/sigstore/pkg/signature"
 	"github.com/sigstore/sigstore/pkg/signature/kms"
 

pkg/ca/kmsca/kmsca_test.go

@@ -25,7 +25,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/sigstore/fulcio/pkg/test"
+	"github.com/securesign/fulcio/pkg/test"
 	"github.com/sigstore/sigstore/pkg/cryptoutils"
 	"github.com/sigstore/sigstore/pkg/signature/kms/fake"
 )

pkg/ca/pkcs11ca/pkcs11ca.go

@@ -26,8 +26,8 @@ import (
 	"path/filepath"
 
 	"github.com/ThalesIgnite/crypto11"
-	"github.com/sigstore/fulcio/pkg/ca"
-	"github.com/sigstore/fulcio/pkg/ca/baseca"
+	"github.com/securesign/fulcio/pkg/ca"
+	"github.com/securesign/fulcio/pkg/ca/baseca"
 )
 
 type Params struct {

pkg/ca/pkcs11ca/pkcs11canocgo.go

@@ -21,7 +21,7 @@ package pkcs11ca
 import (
 	"errors"
 
-	"github.com/sigstore/fulcio/pkg/ca/baseca"
+	"github.com/securesign/fulcio/pkg/ca/baseca"
 )
 
 type PKCS11CA struct {

pkg/ca/signercerts_test.go

@@ -20,7 +20,7 @@ import (
 	"reflect"
 	"testing"
 
-	"github.com/sigstore/fulcio/pkg/test"
+	"github.com/securesign/fulcio/pkg/test"
 	"github.com/sigstore/sigstore/pkg/cryptoutils"
 )
 

pkg/ca/tinkca/tinkca.go

@@ -22,8 +22,8 @@ import (
 	"path/filepath"
 	"strings"
 
-	"github.com/sigstore/fulcio/pkg/ca"
-	"github.com/sigstore/fulcio/pkg/ca/baseca"
+	"github.com/securesign/fulcio/pkg/ca"
+	"github.com/securesign/fulcio/pkg/ca/baseca"
 	"github.com/sigstore/sigstore/pkg/cryptoutils"
 
 	"github.com/google/tink/go/core/registry"

pkg/ca/tinkca/tinkca_test.go

@@ -26,7 +26,7 @@ import (
 	"github.com/google/tink/go/aead"
 	"github.com/google/tink/go/keyset"
 	"github.com/google/tink/go/signature"
-	"github.com/sigstore/fulcio/pkg/test"
+	"github.com/securesign/fulcio/pkg/test"
 	"github.com/sigstore/sigstore/pkg/cryptoutils"
 	_ "github.com/sigstore/sigstore/pkg/signature/kms/fake"
 )

pkg/challenges/challenges.go

@@ -24,16 +24,16 @@ import (
 	"fmt"
 	"strings"
 
-	"github.com/sigstore/fulcio/pkg/config"
-	"github.com/sigstore/fulcio/pkg/identity"
-	"github.com/sigstore/fulcio/pkg/identity/buildkite"
-	"github.com/sigstore/fulcio/pkg/identity/email"
-	"github.com/sigstore/fulcio/pkg/identity/github"
-	"github.com/sigstore/fulcio/pkg/identity/gitlabcom"
-	"github.com/sigstore/fulcio/pkg/identity/kubernetes"
-	"github.com/sigstore/fulcio/pkg/identity/spiffe"
-	"github.com/sigstore/fulcio/pkg/identity/uri"
-	"github.com/sigstore/fulcio/pkg/identity/username"
+	"github.com/securesign/fulcio/pkg/config"
+	"github.com/securesign/fulcio/pkg/identity"
+	"github.com/securesign/fulcio/pkg/identity/buildkite"
+	"github.com/securesign/fulcio/pkg/identity/email"
+	"github.com/securesign/fulcio/pkg/identity/github"
+	"github.com/securesign/fulcio/pkg/identity/gitlabcom"
+	"github.com/securesign/fulcio/pkg/identity/kubernetes"
+	"github.com/securesign/fulcio/pkg/identity/spiffe"
+	"github.com/securesign/fulcio/pkg/identity/uri"
+	"github.com/securesign/fulcio/pkg/identity/username"
 
 	"github.com/coreos/go-oidc/v3/oidc"
 	"github.com/sigstore/sigstore/pkg/cryptoutils"

pkg/config/config.go

@@ -31,8 +31,8 @@ import (
 
 	"github.com/coreos/go-oidc/v3/oidc"
 	lru "github.com/hashicorp/golang-lru"
-	fulciogrpc "github.com/sigstore/fulcio/pkg/generated/protobuf"
-	"github.com/sigstore/fulcio/pkg/log"
+	fulciogrpc "github.com/securesign/fulcio/pkg/generated/protobuf"
+	"github.com/securesign/fulcio/pkg/log"
 	"github.com/spiffe/go-spiffe/v2/spiffeid"
 )