Merge pull request #19 from imjasonh/fix-sarif-and-update-refs

Update repository references

Author: imjasonh

.github/workflows/example.yml

@@ -19,7 +19,7 @@ jobs:
 
       - name: Run Malcontent Analysis
         id: malcontent
-        uses: ./ # In actual usage, this would be: imjasonh/malcontent-action@...
+        uses: ./ # In actual usage, this would be: chainguard-dev/malcontent-action@v1
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 

.github/workflows/push-example.yml

@@ -21,7 +21,7 @@ jobs:
 
       - name: Run Malcontent Diff
         id: malcontent
-        uses: ./ # In actual usage, this would be: imjasonh/malcontent-action@...
+        uses: ./ # In actual usage, this would be: chainguard-dev/malcontent-action@v1
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 

README.md

@@ -54,7 +54,7 @@ jobs:
         with:
           fetch-depth: 0
 
-J      - uses: imjasonh/malcontent-action...
+      - uses: chainguard-dev/malcontent-action...
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 ```
@@ -75,7 +75,7 @@ jobs:
         with:
           fetch-depth: 2  # Need HEAD and HEAD~1
 
-      - uses: imjasonh/malcontent-action@...
+      - uses: chainguard-dev/malcontent-action@...
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 ```
@@ -107,7 +107,7 @@ jobs:
 The `risk-delta` output allows you to implement custom logic based on the magnitude of security changes:
 
 ```yaml
-- uses: imjasonh/malcontent-action@...
+- uses: chainguard-dev/malcontent-action@...
   id: malcontent
   with:
     github-token: ${{ secrets.GITHUB_TOKEN }}
@@ -146,7 +146,7 @@ The `risk-delta` output allows you to implement custom logic based on the magnit
 The action generates a SARIF (Static Analysis Results Interchange Format) report that can be uploaded to GitHub Advanced Security for integration with code scanning:
 
 ```yaml
-- uses: imjasonh/malcontent-action@...
+- uses: chainguard-dev/malcontent-action@...
   id: malcontent
   with:
     github-token: ${{ secrets.GITHUB_TOKEN }}

package.json

@@ -13,7 +13,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/jason/malcontent-action.git"
+    "url": "git+https://github.com/chainguard-dev/malcontent-action.git"
   },
   "keywords": [
     "github",