Security

Enterprise Readiness

Assess and enhance software projects for enterprise-grade security, quality, and automation. Includes supply chain security (SLSA, signing, SBOMs), quality gates, and platform-specific hardening with dynamic scoring.

Latest release v4.14.0

Install

Pick whichever fits your project — they all reach the same skill.

  1. Claude Code via this marketplace
    /plugin install enterprise-readiness@netresearch-claude-code-marketplace
  2. npx any Agent Skills CLI
    npx skills add https://github.com/netresearch/enterprise-readiness-skill --skill enterprise-readiness

    Universal Agent Skills CLI from skills.sh — works across Claude Code, Cursor, GitHub Copilot, Codex, Gemini CLI and 30+ more agents.

  3. composer require PHP project, as a package
    composer require netresearch/enterprise-readiness-skill

    Requires netresearch/composer-agent-skill-plugin — resolves Agent Skills as Composer dependencies in PHP projects, auto-discovers skills, generates AGENTS.md.

  4. composer skills:add PHP project, direct source
    composer skills:add github:netresearch/enterprise-readiness-skill

    Provided by netresearch/composer-agent-skill-plugin — pins skill repos directly without going through Packagist, locks them in composer.skills.lock.

What you can do with it

  • OpenSSF Framework Alignment - Complete coverage across Scorecard, Best Practices Badge (Passing/Silver/Gold), SLSA, and S2C2F
  • Dynamic Scoring - Fair cross-stack assessment with platform/language-specific criteria
  • Supply Chain Security - SLSA provenance, artifact signing, SBOM generation, dependency scanning
  • Quality Gates - Testing layers, coverage thresholds, static analysis, secret scanning
  • Automation Scripts - Ready-to-use scripts for security hardening and compliance checks
  • Badge Progression - Guided path from Passing → Silver → Gold certification

What it expects in your project

Tags

  • security
  • quality-security