Terminology

Playground

We call the repository CLA Bot is monitoring for incoming contributions its 'playground'. This repository would be open to the public (or at least your contributors), so all parts are considered 'visible'.

Home

To avoid alterations to the bot, we advise keeping it in a repository separate from its 'playground', we call this its 'home'. This repository should not be public and have a limited number of members. This is where access tokens and configurations will be kept.

Store

The third project would be identical to 'home' but could be separate if you see a requirement for that. This is where personal data of contributors and their agreement to your CLA will be stored, we call it the 'store'. Again, this should be with a limited set of members and not public.