---
description: OpenSSF Best Practices Badge Passing, Silver, and Gold tier criteria
---

# OpenSSF Best Practices Badge Criteria

Assess readiness against OpenSSF Best Practices Badge tiers:

| Level   | Focus                       | Key Criteria                                                                      |
|---------|-----------------------------|-----------------------------------------------------------------------------------|
| Passing | Basic hygiene (67 criteria) | LICENSE, CONTRIBUTING, build system, test suite, security policy, static analysis |
| Silver  | Governance + quality        | GOVERNANCE.md, code coverage, reproducible builds, signed releases                |
| Gold    | Advanced security           | Formal verification, security audits, advanced threat modeling                    |

Map repository files and practices to Badge criteria. Flag missing criteria as gaps.

## Attribution

OpenSSF Best Practices Badge criteria derived from the CII Best Practices Badge project, licensed under MIT (criteria) and CC BY 3.0+ (documentation). Source: <https://www.bestpractices.dev/>

OpenSSF is a registered trademark of the Linux Foundation.
