🔓 Open Source Policy Skill

🎯 Purpose

This skill ensures all open source activities demonstrate security excellence through transparency as defined in the Hack23 Open Source Policy. It applies to all Hack23-owned repositories, external contributions, and third-party open source usage.

Core principle: Open source transparency creates competitive advantage through systematic security excellence and publicly verifiable governance.

📋 Rules

🎖️ Security Posture Evidence (Required Badges)

MUST display these security badges in README.md:

🏆 Security Assessment Badges

• OpenSSF Scorecard: Supply chain security assessment ≥7.0 score
• CII Best Practices: At least "Passing" level
• SLSA Level 3: Build provenance and integrity attestation
• Quality Gate: SonarCloud or equivalent showing "Passed" status