Enterprise Readiness

Assess a production repository’s release evidence, CI permissions and supply-chain controls.

Overview

Netresearch’s Enterprise Readiness skill guides an agent through assessing a project intended for production. It covers finding existing CI and dependency controls, scoring gaps, applying requested fixes and checking the evidence again. Its documented areas include SBOMs, build provenance, workflow permissions and security disclosure. It is useful when a maintainer wants a structured review with specific gaps to resolve.

Getting started

Use the skill’s assessment references with the repository in scope. Some bundled checks require the documented uv, GitHub CLI, cosign and Docker tooling.

Things to know

The skill targets production or enterprise projects. A checklist and passing workflow provide evidence about configured controls. They do not constitute certification.