One-command CLI to guard any OSS project with OpenSSF security best practices — bootstrap, scan, and monitor.