docs: add OpenSSF Best Practices Passing badge to README by WilliamBerryiii · Pull Request #239 · microsoft/hve-core

WilliamBerryiii · 2026-01-22T04:34:32Z

Description

Adds an OpenSSF Best Practices Passing badge to the README.md Legal section. The badge links to the project's OpenSSF Best Practices entry (Project ID: 11532), displaying current compliance status for security best practices.

Added OpenSSF Best Practices badge after the Security reference in the Legal section
Badge links to bestpractices.dev project 11532

Related Issue(s)

Fixes #233

Type of Change

Select all that apply:

Code & Documentation:

Bug fix (non-breaking change fixing an issue)
New feature (non-breaking change adding functionality)
Breaking change (fix or feature causing existing functionality to change)
Documentation update

Infrastructure & Configuration:

AI Artifacts:

Reviewed contribution with prompt-builder agent and addressed all feedback
Copilot instructions (.github/instructions/*.instructions.md)
Copilot prompt (.github/prompts/*.prompt.md)
Copilot agent (.github/agents/*.agent.md)

Other:

Script/automation (.ps1, .sh, .py)
Other (please describe):

Testing

Verified badge markdown renders correctly in GitHub preview
Confirmed badge link points to correct OpenSSF project (11532)

Checklist

Required Checks

Documentation is updated (if applicable)
Files follow existing naming conventions
Changes are backwards compatible (if applicable)

Required Automated Checks

The following validation commands must pass before merging:

Markdown linting: npm run lint:md
Spell checking: npm run spell-check
Frontmatter validation: npm run lint:frontmatter
Link validation: npm run lint:md-links
PowerShell analysis: npm run lint:ps

Security Considerations

This PR does not contain any sensitive or NDA information
Any new dependencies have been reviewed for security issues
Security-related scripts follow the principle of least privilege

Additional Notes

This PR adds transparency about the project's adherence to OpenSSF security best practices by displaying the Passing badge status.

📛 - Generated by Copilot

github-actions · 2026-01-22T04:34:45Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

Copilot

Pull request overview

This PR adds transparency about the project's security posture by displaying the OpenSSF Best Practices Passing badge in the README. The badge links to the project's OpenSSF Best Practices entry (Project ID: 11532) and shows current compliance status.

Changes:

Added OpenSSF Best Practices badge to the Legal section of README.md, positioned after the existing Security reference

katriendg

Approving but I think we have a typo to fix first?

README.md

bindsi

nice one

- add OpenSSF Passing badge to Legal section linking to project 11532 - badge displays current compliance status for security best practices Fixes #233 📛 - Generated by Copilot

codecov-commenter · 2026-01-22T21:21:28Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (main@c5708d8). Learn more about missing BASE report.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #239   +/-   ##
=======================================
  Coverage        ?   28.81%           
=======================================
  Files           ?       14           
  Lines           ?     2735           
  Branches        ?        0           
=======================================
  Hits            ?      788           
  Misses          ?     1947           
  Partials        ?        0

Flag	Coverage Δ
pester	`28.81% <ø> (?)`

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Copilot

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.

Copilot · 2026-01-22T21:23:20Z

README.md


 **Governance:** See [GOVERNANCE.md](./GOVERNANCE.md) for the project governance model.

+**OpenSSF Best Practices:** [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/11795/badge)](https://www.bestpractices.dev/projects/11795)


The OpenSSF Best Practices Project ID in the badge does not match the ID specified in the PR description and related issue #233. The PR description and issue both specify Project ID 11532, but the badge uses Project ID 11795. This needs to be corrected to use the correct Project ID: 11532.

Suggested change

**OpenSSF Best Practices:** [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/11795/badge)](https://www.bestpractices.dev/projects/11795)

**OpenSSF Best Practices:** [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/11532/badge)](https://www.bestpractices.dev/projects/11532)

🤖 I have created a release *beep* *boop* --- ## [2.0.0](hve-core-v1.1.0...hve-core-v2.0.0) (2026-01-28) ### ⚠ BREAKING CHANGES * **agents:** add Task Reviewer and expand RPI to 4-phase workflow ([#277](#277)) ### ✨ Features * **agents:** add hve-core-installer agent to extension package ([#297](#297)) ([c0e48c6](c0e48c6)) * **agents:** add Task Reviewer and expand RPI to 4-phase workflow ([#277](#277)) ([ae76cab](ae76cab)) * **build:** add code coverage reporting to Pester workflow ([#230](#230)) ([a34822a](a34822a)) * **docs:** add GOVERNANCE.md for OSSF Silver Badge compliance ([#235](#235)) ([b0e752c](b0e752c)) * **docs:** add ROADMAP.md for OSSF Silver badge compliance ([#238](#238)) ([4a41c16](4a41c16)) * **mcp:** add MCP server configuration guidance and installer enhancements ([#225](#225)) ([0bce418](0bce418)) * **scripts:** add YAML linting with actionlint ([#234](#234)) ([d9301f9](d9301f9)) * **security:** add OpenSSF Scorecard workflow and badge ([#271](#271)) ([7c6d788](7c6d788)) * **skills:** add video-to-gif conversion skill with FFmpeg two-pass optimization ([#247](#247)) ([8d65c42](8d65c42)) * **tests:** add Pester tests for LintingHelpers and Validate-MarkdownFrontmatter ([#197](#197), [#198](#198)) ([#205](#205)) ([51ae563](51ae563)) ### 🐛 Bug Fixes * **build:** detect table formatting changes via git diff ([#261](#261)) ([985eee0](985eee0)) * **build:** disable MD024 lint rule in CHANGELOG for release-please ([#220](#220)) ([971df94](971df94)) * **build:** quote shell variables and group redirects in workflow files ([#299](#299)) ([3372509](3372509)) * **build:** resolve scorecard badge and workflow security issues ([#301](#301)) ([aeaed13](aeaed13)) * **extension:** remove frontmatter from README and exclude from markdown linting ([#223](#223)) ([4272529](4272529)) * **instructions:** quote applyTo glob pattern for YAML compatibility ([#216](#216)) ([085199c](085199c)) * **scripts:** add FooterExcludePaths parameter to frontmatter validation ([#334](#334)) ([64db98d](64db98d)) * **scripts:** add GHSA word and logs/ exclusion to cspell config ([#214](#214)) ([5c99b3f](5c99b3f)) * **scripts:** correct type assertions in Invoke-YamlLint.Tests.ps1 ([#332](#332)) ([af7050d](af7050d)) * **scripts:** eliminate false positives in dependency pinning npm pattern ([#273](#273)) ([ccbdfa3](ccbdfa3)) * **security:** add artifact attestation for signed releases ([#257](#257)) ([c52d6e2](c52d6e2)) * standardize markdown footers and complete frontmatter ([#217](#217)) ([b4e7556](b4e7556)) ### 📚 Documentation * add OpenSSF Best Practices Passing badge to README ([#239](#239)) ([91bc529](91bc529)) * **architecture:** add architecture documentation and value proposition ([#252](#252)) ([0e4b02f](0e4b02f)) * **contributing:** add testing requirements for OSSF compliance ([#254](#254)) ([4db1a18](4db1a18)) * **docs:** add enterprise status badges to README header ([#270](#270)) ([ccb68a4](ccb68a4)) * **security:** add security assurance case and threat model for OSSF Silver ([#259](#259)) ([a390e26](a390e26)) ### ♻️ Refactoring * **application:** wrap execution with try blocks, ensure proper … ([#296](#296)) ([35c4417](35c4417)) * **scripts:** extract frontmatter validation to testable module ([#293](#293)) ([4e8707e](4e8707e)) * **scripts:** extract pure functions for Pester testability ([#221](#221)) ([d40e742](d40e742)) ### 🔧 Maintenance * **deps-dev:** bump cspell from 9.4.0 to 9.6.0 in the npm-dependencies group ([#208](#208)) ([855914b](855914b)) * **deps-dev:** bump cspell from 9.6.0 to 9.6.1 in the npm-dependencies group ([#294](#294)) ([1e45ad6](1e45ad6)) * **deps:** bump actions/setup-node from 6.1.0 to 6.2.0 in the github-actions group ([#209](#209)) ([c4c69e2](c4c69e2)) * **deps:** bump the github-actions group with 4 updates ([#295](#295)) ([d8337b8](d8337b8)) * remove step-security/harden-runner from workflows ([#246](#246)) ([c5708d8](c5708d8)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). Co-authored-by: hve-core-release-please[bot] <254602402+hve-core-release-please[bot]@users.noreply.github.com>

WilliamBerryiii requested a review from a team as a code owner January 22, 2026 04:34

Copilot AI review requested due to automatic review settings January 22, 2026 04:34

Copilot started reviewing on behalf of WilliamBerryiii January 22, 2026 04:34 View session

Copilot AI reviewed Jan 22, 2026

View reviewed changes

katriendg approved these changes Jan 22, 2026

View reviewed changes

README.md Outdated Show resolved Hide resolved

agreaves-ms approved these changes Jan 22, 2026

View reviewed changes

bindsi approved these changes Jan 22, 2026

View reviewed changes

docs: add OpenSSF Best Practices Passing badge to README

a3e6b46

- add OpenSSF Passing badge to Legal section linking to project 11532 - badge displays current compliance status for security best practices Fixes #233 📛 - Generated by Copilot

Copilot AI review requested due to automatic review settings January 22, 2026 21:20

WilliamBerryiii force-pushed the 233-add-ossf-passing-badge branch from 9803f61 to a3e6b46 Compare January 22, 2026 21:20

Copilot started reviewing on behalf of WilliamBerryiii January 22, 2026 21:22 View session

WilliamBerryiii merged commit 91bc529 into main Jan 22, 2026
20 checks passed

WilliamBerryiii deleted the 233-add-ossf-passing-badge branch January 22, 2026 21:22

Copilot AI reviewed Jan 22, 2026

View reviewed changes

hve-core-release-please bot mentioned this pull request Jan 22, 2026

chore(main): release hve-core 2.0.0 #212

Merged

This was referenced Jan 28, 2026

chore(main): release hve-core 3.0.0 #341

Closed

chore(main): release hve-core 3.0.0 #417

Closed

This was referenced Feb 6, 2026

chore(main): release hve-core 3.0.0 #441

Closed

chore(main): release hve-core 3.0.0 #530

Closed

chore(main): release hve-core 3.0.0 #532

Closed

chore(main): release hve-core 3.0.0 #534

Closed

hve-core-release-please bot mentioned this pull request Feb 17, 2026

chore(main): release hve-core 3.0.0 #641

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

docs: add OpenSSF Best Practices Passing badge to README#239

docs: add OpenSSF Best Practices Passing badge to README#239
WilliamBerryiii merged 1 commit intomainfrom
233-add-ossf-passing-badge

WilliamBerryiii commented Jan 22, 2026

Uh oh!

github-actions bot commented Jan 22, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

katriendg left a comment

Uh oh!

Uh oh!

bindsi left a comment

Uh oh!

codecov-commenter commented Jan 22, 2026 •

edited

Loading

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Jan 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants


		Governance: See [GOVERNANCE.md](./GOVERNANCE.md) for the project governance model.

		OpenSSF Best Practices: [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/11795/badge)](https://www.bestpractices.dev/projects/11795)

Conversation

WilliamBerryiii commented Jan 22, 2026

Description

Related Issue(s)

Type of Change

Testing

Checklist

Required Checks

Required Automated Checks

Security Considerations

Additional Notes

Uh oh!

github-actions bot commented Jan 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

Scanned Files

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

katriendg left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

bindsi left a comment

Choose a reason for hiding this comment

Uh oh!

codecov-commenter commented Jan 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI Jan 22, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

github-actions bot commented Jan 22, 2026 •

edited

Loading

codecov-commenter commented Jan 22, 2026 •

edited

Loading