♻️ refactor(settings): remove all Chronicle mentions from docstrings and descriptions

Author: Kakudou

external-import/google-secops-siem-incidents/src/google_secops_siem_incidents/client_api.py

@@ -1,4 +1,4 @@
-"""Google SecOps Chronicle API client with Google OAuth2 service-account auth."""
+"""Google SecOps API client with Google OAuth2 service-account auth."""
 
 from collections.abc import AsyncIterator
 from typing import Any
@@ -56,7 +56,7 @@ async def after(self, request: BaseRequestModel, response: Any) -> None:
 
 
 class GoogleSecOpsApiClient:
-    """Chronicle API client for fetching rule alerts via Legacy Search endpoint."""
+    """API client for fetching rule alerts via Legacy Search endpoint."""
 
     _SCOPES = ["https://www.googleapis.com/auth/cloud-platform"]
     _API_VERSION = "v1alpha"
@@ -87,7 +87,7 @@ def _build_service_account_info(config: GoogleSecOpsConfig) -> dict[str, str]:
         """Map GoogleSecOpsConfig fields to the service-account info dict expected by google-auth.
 
         Args:
-            config: Connector configuration with Chronicle credentials.
+            config: Connector configuration with credentials.
 
         Returns:
             Dict suitable for ``Credentials.from_service_account_info``.
@@ -106,7 +106,7 @@ def _build_service_account_info(config: GoogleSecOpsConfig) -> dict[str, str]:
         }
 
     def _regionalized_url(self) -> str:
-        """Build the Chronicle API base URL with the region prefix.
+        """Build the API base URL with the region prefix.
 
         Returns:
             Regionalized base URL string.
@@ -117,7 +117,7 @@ def _regionalized_url(self) -> str:
         return f"https://{region}-{host}"
 
     def _instance_path(self) -> str:
-        """Build the Chronicle resource instance path.
+        """Build the resource instance path.
 
         Returns:
             Resource path string for the configured project/region/instance.
@@ -167,7 +167,7 @@ async def fetch_rule_alerts(
         end_time: str,
         max_alerts: int = 1000,
     ) -> AsyncIterator[RuleAlertResponse]:
-        """Fetch rule alerts from Chronicle using backward-sliding pagination.
+        """Fetch rule alerts from using backward-sliding pagination.
 
         Args:
             start_time: ISO-8601 start of the query window.

external-import/google-secops-siem-incidents/src/google_secops_siem_incidents/connector.py

@@ -85,7 +85,7 @@ def __init__(self, config: ConnectorSettings, helper: OpenCTIConnectorHelper):
 
     @property
     def client(self) -> GoogleSecOpsApiClient:
-        """Lazy-initialize and return the Chronicle API client.
+        """Lazy-initialize and return the API client.
 
         Returns:
             Initialised GoogleSecOpsApiClient instance.
@@ -117,7 +117,7 @@ def _collect_intelligence(self, state: GoogleSecOpsSIEMState | None = None) -> N
         asyncio.run(self._async_process_message(state))
 
     async def _async_process_message(self, state: GoogleSecOpsSIEMState) -> None:
-        """Fetch Chronicle rule alerts, convert to STIX bundles, and persist state.
+        """Fetch rule alerts, convert to STIX bundles, and persist state.
 
         Args:
             state: Current connector state with timestamp and pagination fields.

external-import/google-secops-siem-incidents/src/google_secops_siem_incidents/models/rule_alert_response.py

@@ -1,4 +1,4 @@
-"""Pydantic v2 models for Chronicle Legacy Search Rules Alerts response."""
+"""Pydantic v2 models for Legacy Search Rules Alerts response."""
 
 from pydantic import BaseModel, ConfigDict, Field
 
@@ -12,7 +12,7 @@ class StringSeq(BaseModel):
 
 
 class Outcome(BaseModel):
-    """A named outcome produced by a Chronicle detection rule."""
+    """A named outcome produced by a detection rule."""
 
     model_config = ConfigDict(populate_by_name=True)
 
@@ -43,7 +43,7 @@ class TimeWindow(BaseModel):
 
 
 class Alert(BaseModel):
-    """A single detection alert raised by a Chronicle rule."""
+    """A single detection alert raised by a rule."""
 
     model_config = ConfigDict(populate_by_name=True)
 
@@ -60,7 +60,7 @@ class Alert(BaseModel):
 
 
 class RuleProperties(BaseModel):
-    """Static properties of a Chronicle detection rule."""
+    """Static properties of a detection rule."""
 
     model_config = ConfigDict(populate_by_name=True)
 
@@ -88,7 +88,7 @@ class RuleAlert(BaseModel):
 
 
 class RuleAlertResponse(BaseModel):
-    """Top-level response from the Chronicle Legacy Search Rules Alerts endpoint."""
+    """Top-level response from the Legacy Search Rules Alerts endpoint."""
 
     model_config = ConfigDict(populate_by_name=True)
 

external-import/google-secops-siem-incidents/src/google_secops_siem_incidents/settings.py

@@ -30,17 +30,15 @@ class ExternalImportConnectorConfig(BaseExternalImportConnectorConfig):
 
 
 class GoogleSecOpsConfig(BaseConfigModel):
-    """Configuration specific to the Google SecOps Chronicle connector."""
+    """Configuration specific to the Google SecOps connector."""
 
     base_url: str = Field(
         "https://chronicle.googleapis.com",
-        description="Chronicle API base URL (region prefix added at runtime).",
+        description="API base URL (region prefix added at runtime).",
     )
     project_id: str = Field(description="GCP project ID.")
-    project_region: str = Field(
-        description="Chronicle region (e.g. 'us', 'eu', 'asia')."
-    )
-    project_instance: str = Field(description="Chronicle instance UUID.")
+    project_region: str = Field(description="Region (e.g. 'us', 'eu', 'asia').")
+    project_instance: str = Field(description="Instance UUID.")
     private_key: str = Field(description="Service account private key (PEM).")
     private_key_id: str = Field(description="Service account private key ID.")
     client_email: str = Field(description="Service account client email.")