Guide CNCF projects through OpenSSF Best Practices badge criteria.
npx skills add https://github.com/castrojo/cncf-skills --skill openssf-badge
Please help me install this Agent Skill. Skill: openssf-badge Source: https://github.com/castrojo/cncf-skills/tree/main/skills/openssf-badge Command: npx skills add https://github.com/castrojo/cncf-skills --skill openssf-badge
This Skill guides CNCF projects through the process of obtaining the OpenSSF Best Practices badge, a critical requirement for project graduation.
Use the openssf-badge skill to begin the process of earning the OpenSSF Best Practices badge for your project.
High-intent search queries and answers about installing and using this skill.
To earn the OpenSSF Best Practices badge, you must complete the criteria checklist by resolving security policies, implementing automated testing and code review, and adding the badge to your README.md file.
OpenSSF Best Practices badge requirements include establishing security policies, implementing automated testing, enforcing code review processes, and achieving a 100% passing threshold on the criteria checklist.
Adding the OpenSSF badge to your README.md involves completing the criteria checklist, verifying your project meets the 100% passing threshold, and embedding the provided badge markdown link into your repository.
Yes, the OpenSSF Best Practices badge is a mandatory hard gate for CNCF graduation, requiring projects to fulfill all checklist criteria and achieve a 100% passing threshold before approval.
Resolving security policies for the OpenSSF badge requires documenting your project's security protocols, vulnerability reporting mechanisms, and ensuring these policies are publicly accessible to meet checklist criteria.
Automated testing is a required criterion for the OpenSSF Best Practices badge, necessitating continuous integration pipelines that execute test suites to verify code quality and maintain the 100% passing threshold.
securityreviewaiAnalyzes Git repositories to produce summaries of their structure, risks, and key components.
castrojoConfigure the OpenSSF Scorecard GitHub Action for automated supply-chain security scoring.
GrassHopper42Detect, repair, and verify iOS bugs in CI/CD pipelines.
castrojoGuide CNCF projects through creating and submitting TAG Security self-assessment questionnaires.
