From 96b4cf32bde3686df8457db8cf0b31b909fdb86c Mon Sep 17 00:00:00 2001 From: Haksung Jang Date: Tue, 4 Aug 2026 18:02:13 +0900 Subject: [PATCH] chore(brand): expand TRUSCA as Trusted SCA MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The lockup tagline read "TrustedOSS SCA" while CHANGELOG already recorded "Trust + SCA". Settle on Trusted SCA — it reads without knowing the umbrella initiative — and rewrite the login pitch, whose Korean rendered "for the whole portfolio" literally and named no portfolio. Past release notes keep their wording. --- README.md | 4 ++-- actions/scan/README.md | 8 ++++---- actions/scan/action.yml | 6 +++--- apps/frontend/src/components/BrandLockup.tsx | 11 +++++------ apps/frontend/src/locales/en/auth.json | 2 +- apps/frontend/src/locales/ko/auth.json | 2 +- docs-site/docs/intro.md | 5 ++--- docs-site/i18n/ko/code.json | 2 +- .../docusaurus-plugin-content-docs/current/intro.md | 9 ++++----- docs-site/src/pages/index.tsx | 5 ++--- templates/gitlab-ci.yml | 4 ++-- 11 files changed, 27 insertions(+), 31 deletions(-) diff --git a/README.md b/README.md index 15599f1..410a2e3 100644 --- a/README.md +++ b/README.md @@ -4,7 +4,7 @@

TRUSCA

-

TrustedOSS SCA — open-source software composition analysis

+

Trusted SCA — open-source software composition analysis

[![License: Apache 2.0](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](LICENSE) [![Release](https://img.shields.io/badge/release-v0.12.0-0f766e.svg)](CHANGELOG.md) @@ -13,7 +13,7 @@ > Open-source enterprise SCA portal — manage CVEs, license compliance, and SBOMs in one self-hosted UI. -**TRUSCA** — the SCA tool of the [TrustedOSS](https://trustedoss.github.io/) initiative — is an Apache-2.0 licensed, self-hosted alternative to commercial Software Composition Analysis (SCA) products. It unifies vulnerability tracking (CVE), license compliance, and Software Bill of Materials (SBOM) management for engineering and legal teams. +**TRUSCA** (short for Trusted SCA) is an Apache-2.0 licensed, self-hosted alternative to commercial Software Composition Analysis (SCA) products. It unifies vulnerability tracking (CVE), license compliance, and Software Bill of Materials (SBOM) management for engineering and legal teams. > **🔭 Live demo:** **[trusca-demo.duckdns.org](https://trusca-demo.duckdns.org)** — a public, read-only demo seeded with real projects, scans, CVEs, licenses, and SBOMs. Sign in as `dev@demo.trustedoss.dev` / `DemoTest2026!` (the same password works for every seeded account). Writes are disabled and the dataset resets nightly; you can also upload a CycloneDX SBOM to the **Demo Sandbox** project and watch it matched against licenses and CVEs. See [Live demo](https://trustedoss.github.io/trusca/docs/installation/live-demo). diff --git a/actions/scan/README.md b/actions/scan/README.md index 9540b27..23d9b2e 100644 --- a/actions/scan/README.md +++ b/actions/scan/README.md @@ -1,6 +1,6 @@ -# TrustedOSS SCA Scan — GitHub Action +# TRUSCA Scan — GitHub Action -Composite GitHub Action that triggers a TrustedOSS SCA scan, waits for it to +Composite GitHub Action that triggers a TRUSCA scan, waits for it to finish, evaluates the build gate, and (on pull requests) posts the SCA report back to the PR. @@ -13,7 +13,7 @@ SCA tool ships, on Apache-2.0 self-hosted infra. ## Quick start ```yaml -name: TrustedOSS SCA +name: TRUSCA SCA on: pull_request: push: @@ -24,7 +24,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - - name: TrustedOSS SCA scan + - name: TRUSCA SCA scan uses: trustedoss/scan-action@v1 with: api-url: https://trustedoss.example.com diff --git a/actions/scan/action.yml b/actions/scan/action.yml index 018556d..4b6f81a 100644 --- a/actions/scan/action.yml +++ b/actions/scan/action.yml @@ -1,7 +1,7 @@ # SPDX-License-Identifier: Apache-2.0 # Copyright 2026 TRUSCA contributors -name: 'TrustedOSS SCA Scan' -description: 'Trigger a TrustedOSS scan and gate the build on Critical CVEs / forbidden licenses.' +name: 'TRUSCA Scan' +description: 'Trigger a TRUSCA scan and gate the build on Critical CVEs / forbidden licenses.' author: 'TrustedOSS' branding: icon: 'shield' @@ -280,7 +280,7 @@ runs: # Job summary block — visible on the workflow run page. { - echo "## TrustedOSS SCA Gate" + echo "## TRUSCA Gate" echo "" echo "| Field | Value |" echo "|---|---|" diff --git a/apps/frontend/src/components/BrandLockup.tsx b/apps/frontend/src/components/BrandLockup.tsx index d5b32cd..f230cca 100644 --- a/apps/frontend/src/components/BrandLockup.tsx +++ b/apps/frontend/src/components/BrandLockup.tsx @@ -2,16 +2,15 @@ // Copyright 2026 TRUSCA contributors /** * BrandLockup — the full TRUSCA logo: mark + "TRUSCA" wordmark + the - * "TrustedOSS SCA" tagline (the SCA tool of the TrustedOSS initiative). + * "Trusted SCA" tagline, which is what the name expands to. * * Used where there is vertical room (the auth gateway, brand showcase). * Tight surfaces — the 48 px sidebar / header — use the reduced lockup * (BrandMark + BrandWordmark, no tagline). * - * The tagline is a brand string (not translated) and is NOT uppercased — - * the umbrella name "TrustedOSS" keeps its camel casing. Its colour uses the - * theme's muted-foreground token (passes WCAG AA), while the mark gradient - * and the teal wordmark are fixed brand colours. + * The tagline is a brand string (not translated) and is NOT uppercased. Its + * colour uses the theme's muted-foreground token (passes WCAG AA), while the + * mark gradient and the teal wordmark are fixed brand colours. */ import { BrandMark } from "@/components/BrandMark"; import { BrandWordmark } from "@/components/BrandWordmark"; @@ -46,7 +45,7 @@ export function BrandLockup({ onInk ? "text-topbar-muted-foreground" : "text-muted-foreground", )} > - TrustedOSS SCA + Trusted SCA diff --git a/apps/frontend/src/locales/en/auth.json b/apps/frontend/src/locales/en/auth.json index 6d36ebd..43dc991 100644 --- a/apps/frontend/src/locales/en/auth.json +++ b/apps/frontend/src/locales/en/auth.json @@ -89,7 +89,7 @@ "rate_limited": "Too many attempts. Please wait a moment." }, "gateway": { - "pitch": "Open-source risk for the whole portfolio — vulnerabilities, licences and SBOMs in one place.", + "pitch": "Know what open source you run and where the risk is — vulnerabilities, licences and SBOMs.", "trust": { "hosting": "Apache-2.0 and self-hosted: your source and your findings stay on your own infrastructure.", "sources": "Vulnerability data from NVD, OSV and GHSA, with EPSS scores and the CISA known-exploited catalogue.", diff --git a/apps/frontend/src/locales/ko/auth.json b/apps/frontend/src/locales/ko/auth.json index 4ab2573..989dc56 100644 --- a/apps/frontend/src/locales/ko/auth.json +++ b/apps/frontend/src/locales/ko/auth.json @@ -89,7 +89,7 @@ "rate_limited": "시도 횟수가 많습니다. 잠시 후 다시 시도하세요." }, "gateway": { - "pitch": "오픈소스 위험을 포트폴리오 단위로 봅니다 — 취약점 · 라이선스 · SBOM.", + "pitch": "어떤 오픈소스를 쓰고 있고 무엇이 위험한지 파악합니다 — 취약점 · 라이선스 · SBOM.", "trust": { "hosting": "Apache-2.0 라이선스이며 직접 설치해 운영합니다. 소스 코드와 스캔 결과가 사내 인프라 밖으로 나가지 않습니다.", "sources": "취약점 데이터는 NVD · OSV · GHSA를 사용하고, EPSS 점수와 CISA 악용 목록(KEV)을 함께 반영합니다.", diff --git a/docs-site/docs/intro.md b/docs-site/docs/intro.md index c6466e9..7b147e6 100644 --- a/docs-site/docs/intro.md +++ b/docs-site/docs/intro.md @@ -9,9 +9,8 @@ slug: /intro # TRUSCA -**TRUSCA** — the SCA tool of the [TrustedOSS](https://trustedoss.github.io/) -initiative — is a self-hosted, Apache-2.0 Software Composition -Analysis (SCA) platform. It unifies CVE tracking, license compliance, and +**TRUSCA** (short for Trusted SCA) is a self-hosted, Apache-2.0 Software +Composition Analysis (SCA) platform. It unifies CVE tracking, license compliance, and SBOM management in a single web UI — without the per-seat licensing of commercial products. diff --git a/docs-site/i18n/ko/code.json b/docs-site/i18n/ko/code.json index d571460..dab0a98 100644 --- a/docs-site/i18n/ko/code.json +++ b/docs-site/i18n/ko/code.json @@ -6,7 +6,7 @@ "message": "Apache-2.0 · 자체 호스팅 · v0.19.2" }, "homepage.hero.subtitle": { - "message": "TrustedOSS의 SCA 도구, TRUSCA — 취약점, 라이선스 컴플라이언스, SBOM을 하나의 자체 호스팅 UI에서. 시트당 라이선스 비용 없음." + "message": "Trusted SCA — 취약점, 라이선스 컴플라이언스, SBOM을 자체 호스팅 UI 하나에서 관리합니다. 좌석당 라이선스 비용이 없습니다." }, "homepage.hero.cta.quickstart": { "message": "Quickstart — 5분" diff --git a/docs-site/i18n/ko/docusaurus-plugin-content-docs/current/intro.md b/docs-site/i18n/ko/docusaurus-plugin-content-docs/current/intro.md index 400e49e..234edcd 100644 --- a/docs-site/i18n/ko/docusaurus-plugin-content-docs/current/intro.md +++ b/docs-site/i18n/ko/docusaurus-plugin-content-docs/current/intro.md @@ -9,11 +9,10 @@ slug: /intro # TRUSCA -**TRUSCA**는 [TrustedOSS](https://trustedoss.github.io/)의 SCA 도구로, -자체 호스팅이 가능한 Apache-2.0 라이선스의 SCA -(Software Composition Analysis) 플랫폼입니다. CVE 추적, 라이선스 컴플라이언스, -SBOM 관리를 한 화면에서 통합 제공하며, 상용 제품의 좌석당 라이선스 비용 없이 -운영할 수 있습니다. +**TRUSCA**는 Trusted SCA에서 온 이름으로, 자체 호스팅이 가능한 +Apache-2.0 라이선스의 SCA(Software Composition Analysis) 플랫폼입니다. +CVE 추적, 라이선스 컴플라이언스, SBOM 관리를 한 화면에서 통합 제공하며, +상용 제품의 좌석당 라이선스 비용 없이 운영할 수 있습니다. ## 시작 지점 diff --git a/docs-site/src/pages/index.tsx b/docs-site/src/pages/index.tsx index 3f23539..c3fe57a 100644 --- a/docs-site/src/pages/index.tsx +++ b/docs-site/src/pages/index.tsx @@ -22,9 +22,8 @@ function HomepageHero(): ReactNode {

{siteConfig.title}

- The SCA tool of the TrustedOSS initiative — vulnerabilities, - license compliance, and SBOMs in one self-hosted UI. No per-seat - licensing. + Trusted SCA — vulnerabilities, license compliance, and SBOMs in + one self-hosted UI. No per-seat licensing.

diff --git a/templates/gitlab-ci.yml b/templates/gitlab-ci.yml index 0ed0a30..4be9595 100644 --- a/templates/gitlab-ci.yml +++ b/templates/gitlab-ci.yml @@ -1,6 +1,6 @@ -# TrustedOSS SCA — GitLab CI template +# TRUSCA — GitLab CI template # ============================================================================= -# Triggers a TrustedOSS SCA scan, polls until it finishes, evaluates the build +# Triggers a TRUSCA scan, polls until it finishes, evaluates the build # gate, posts the SCA report to the MR (when running on a merge_request_event # pipeline), and exits non-zero on gate failure so the pipeline turns red. #