make sure we have all sources / make sure it goes to them, not NSA/Microsoft

right now this hits nsa/microsoft github, exclusively - make so that it doesn't touch nsa/microsoft github.