diff --git a/cmd/app/main.go b/cmd/app/main.go
index 2773ee0..46ba26a 100644
--- a/cmd/app/main.go
+++ b/cmd/app/main.go
@@ -13,9 +13,9 @@ import (
 	kms "cloud.google.com/go/kms/apiv1"
 	"github.com/bradleyfalzon/ghinstallation/v2"
 	"github.com/chainguard-dev/clog"
+	"github.com/chainguard-dev/octo-sts/pkg/gcpkms"
+	"github.com/chainguard-dev/octo-sts/pkg/octosts"
 	"github.com/kelseyhightower/envconfig"
-	"github.com/mattmoor/octo-sts/pkg/gcpkms"
-	"github.com/mattmoor/octo-sts/pkg/octosts"
 	"google.golang.org/grpc"
 	"google.golang.org/grpc/credentials/insecure"
 )
diff --git a/go.mod b/go.mod
index ffeef34..7330016 100644
--- a/go.mod
+++ b/go.mod
@@ -1,4 +1,4 @@
-module github.com/mattmoor/octo-sts
+module github.com/chainguard-dev/octo-sts
 
 go 1.21.2
 
@@ -14,6 +14,7 @@ require (
 	github.com/golang-jwt/jwt/v4 v4.5.0
 	github.com/google/go-github/v57 v57.0.0
 	github.com/kelseyhightower/envconfig v1.4.0
+	google.golang.org/api v0.149.0
 	google.golang.org/grpc v1.60.1
 	sigs.k8s.io/yaml v1.4.0
 )
@@ -65,7 +66,6 @@ require (
 	golang.org/x/sync v0.4.0 // indirect
 	golang.org/x/sys v0.16.0 // indirect
 	golang.org/x/text v0.14.0 // indirect
-	google.golang.org/api v0.149.0 // indirect
 	google.golang.org/appengine v1.6.8 // indirect
 	google.golang.org/genproto v0.0.0-20231212172506-995d672761c0 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20240102182953-50ed04b92917 // indirect