Hve-core secure-by-design

Secure by Design principles knowledge base for assessing adherence to security-first design, development, and deployment practices across the software lifecycle - Brought to you by microsoft/hve-core.

install
source · Clone the upstream repo
git clone https://github.com/microsoft/hve-core
Claude Code · Install into ~/.claude/skills/
T=$(mktemp -d) && git clone --depth=1 https://github.com/microsoft/hve-core "$T" && mkdir -p ~/.claude/skills && cp -r "$T/.github/skills/security/secure-by-design" ~/.claude/skills/microsoft-hve-core-secure-by-design && rm -rf "$T"
manifest: .github/skills/security/secure-by-design/SKILL.md
source content

Secure by Design — Skill Entry

This

SKILL.md
is the entrypoint for the Secure by Design skill.

The skill synthesizes the UK Government Secure by Design Principles (10 principles) and the Australian ASD/ACSC Secure by Design Foundations (6 foundations) into structured, machine-readable references that an agent can query to identify, assess, and improve adherence to secure-by-design practices across the software lifecycle.

Normative references (Secure by Design)

  1. 00 Principle Index
  2. 01 Security Governance
  3. 02 Risk-Driven Approach
  4. 03 Secure Product Development
  5. 04 Supply Chain Security
  6. 05 Usable Security Controls
  7. 06 Detect and Respond
  8. 07 Flexible Architecture
  9. 08 Minimize Attack Surface
  10. 09 Defense in Depth
  11. 10 Continuous Assurance
  12. 11 Secure Deprecation

Skill layout

  • SKILL.md
    — this file (skill entrypoint).
  • references/
    — the Secure by Design normative documents.
    • 00-principle-index.md
      — index of all principle identifiers, categories, source mappings, and cross-references.
    • 01
      through
      11
      — one document per synthesized principle area merging UK and AU guidance.

Third-Party Attribution

UK Government Secure by Design Principles

Australian ASD/ACSC Secure by Design Foundations


🤖 Crafted with precision by ✨Copilot following brilliant human instruction, then carefully refined by our team of discerning human reviewers.