fix: for handover (#18)

* Remove unnecessary Copyright claims

When the time comes, if required, and after handover,
ErlEF will take care of it

* Prepare for new GitHub org.

* Check it (CI) with reuse

* Accept Copilot's proposal

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Accept Copilot's security improvement

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Reduce blast radius

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Author: kivra-pauoli

.github/workflows/ci.yaml

@@ -6,14 +6,26 @@ name: Continuous Integration
 on:
   pull_request:
 
-permissions:
-  # The API requires write permission on the repository to submit dependencies
-  contents: write
-
 jobs:
+  reuse-compliance-check:
+    name: REUSE Compliance Check
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: REUSE Compliance Check
+        uses: fsfe/reuse-action@676e2d560c9a403aa252096d99fcab3e1132b0f5 # v6.0.0
+
   continuous-integration:
     name: Continuous Integration
     runs-on: ubuntu-24.04
+    permissions:
+      # The API requires write permission on the repository to submit dependencies
+      contents: write
 
     steps:
       - name: Checkout code

LICENSES/Apache-2.0.md

@@ -176,8 +176,6 @@ Copyright 2025, Max Sörliden Nordlund <max.nordlund@kivra.com>.
 
 Copyright 2026, Kivra AB.
 
-<!-- # TBD(erlef): Copyright? -->
-
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
 You may obtain a copy of the License at

README.md

@@ -48,8 +48,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6.0.2
-      # TBD(erlef): update uses
-      - uses: kivra/rebar3-dependency-submission@v1.0.0
+      - uses: erlef/rebar3-dependency-submission@v1.0.0
 ```
 
 ## Inputs
@@ -77,9 +76,7 @@ to update the table above.
 
 ## License
 
-Copyright 2026 Kivra
-
-<!-- # TBD(erlef): Copyright? -->
+Copyright 2026 Kivra AB
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.

action.yaml

@@ -5,8 +5,7 @@ name: Rebar3 Dependency Submission
 # yamllint disable-line rule:line-length
 description: Calculates dependencies for Rebar3 and submits the list to the GitHub Dependency Submission API
 
-# TBD(erlef): author
-author: Kivra
+author: Erlang Ecosystem Foundation
 
 branding:
   icon: arrow-up
@@ -25,8 +24,7 @@ runs:
     - name: Download Dependency Submission Tool
       env:
         TAG: v1.0.0-beta.16 # release-TAG
-        # TBD(erlef): update REPO
-        REPO: kivra/rebar3-dependency-submission
+        REPO: erlef/rebar3-dependency-submission
         GITHUB_TOKEN: ${{ inputs.token }}
       run: |
         gh release download \
@@ -40,8 +38,7 @@ runs:
     - name: Verify Dependency Submission Tool Provenance
       env:
         TAG: v1.0.0-beta.16 # release-TAG
-        # TBD(erlef): update REPO
-        REPO: kivra/rebar3-dependency-submission
+        REPO: erlef/rebar3-dependency-submission
         GITHUB_TOKEN: ${{ inputs.token }}
       run: |
         gh attestation verify \

example.lock.license

@@ -0,0 +1,2 @@
+%% SPDX-License-Identifier: Apache-2.0
+%% SPDX-FileCopyrightText: 2026 Kivra AB

rebar.config

@@ -65,8 +65,7 @@
 {hex, [{doc, #{provider => ex_doc}}]}.
 
 {ex_doc, [
-    % TBD(erlef): update source_url
-    {source_url, "https://github.com/kivra/rebar3-dependency-submission"},
+    {source_url, "https://github.com/erlef/rebar3-dependency-submission"},
     {extras, [
         {"README.md", #{title => "Overview"}},
         {"LICENSES/Apache-2.0.md", #{title => "License"}}

rebar.lock.license

@@ -0,0 +1,2 @@
+%% SPDX-License-Identifier: Apache-2.0
+%% SPDX-FileCopyrightText: 2026 Kivra AB

src/rebar3_dependency_submission_snapshot.erl

@@ -76,8 +76,7 @@ new(#{
         detector => #{
             name => ~"rebar3-dependency-submission",
             version => rebar3_dependency_submission_common:to_binary(PluginVsn),
-            % TBD(erlef): update url
-            url => ~"https://github.com/kivra/rebar3-dependency-submission"
+            url => ~"https://github.com/erlef/rebar3-dependency-submission"
         },
         scanned => calendar:system_time_to_rfc3339(
             erlang:system_time(millisecond), [