メニュー
Production-ready templates for CONTRIBUTING.md, SECURITY.md, and GitHub issue forms. OpenSSF Best Practices Badge compliant, copy-paste ready, with realistic SLAs.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
| name | open-source-project-templates |
| description | Production-ready templates for CONTRIBUTING.md, SECURITY.md, and GitHub issue forms. OpenSSF Best Practices Badge compliant, copy-paste ready, with realistic SLAs. |
Copy-paste templates for open source project documentation based on real OpenSSF Best Practices Badge certification work. CONTRIBUTING.md, SECURITY.md, and GitHub issue forms with realistic SLAs and proven compliance.
Source Material
These templates come from the readability project's OpenSSF certification (PRs #93, #94, #95).
See the full implementation guide in the source documentation.
How these templates satisfy OpenSSF Badge criteria:
| Criterion | Template | Compliance |
|---|---|---|
| Documentation | CONTRIBUTING.md | ✅ Explains how to contribute |
| Bug Reporting | Bug Report template | ✅ Structured process |
| Enhancement Proposals | Feature Request template | ✅ Clear submission path |
| Security Process | SECURITY.md | ✅ Disclosure mechanism |
| Response Timelines | SECURITY.md SLAs | ✅ Realistic commitments |
| Testing Requirements | CONTRIBUTING.md | ✅ Coverage thresholds |
| Code Review | CONTRIBUTING.md PR process | ✅ Approval requirements |
✅ Contributing file: CONTRIBUTING.md with setup, testing, PR process
✅ Bug reporting: Issue templates with structured fields
✅ Enhancement proposals: Feature request template
✅ Security disclosure: SECURITY.md with private channel (Security Advisories)
✅ Security response: Documented SLAs (48hr initial, 7 day update, 90 day resolution)
Production-grade Go CLI patterns, automated release workflows with Release Please, versioned docs, and coverage enforcement for DevSecOps build pipelines.
Design CLI commands that work independently and compose well for automation. Orchestrator pattern coordinates, subcommands execute discrete tasks.
Implement idiomatic Kubernetes operations with label selectors, strategic merge patches, and proper error handling for production-grade CLI tooling.
Choose the right Go CLI framework for Kubernetes-native tools. Decision matrix compares Cobra, urfave/cli, and Kong for ecosystem alignment and features.
Build Kubernetes-native CLIs in Go with type safety, testability, and complex orchestration logic for deployment tools and cluster automation.
Integrate Go CLIs with Kubernetes using client-go. Automatic config detection works on laptops, CI runners, and cluster pods with minimal RBAC setup.
