CII Best Practices badge wanted

It would be really great to see how AppImage projects (AppImageKit in particular) stand with respect to norms and practices of Core Infrastructure Initiative: https://bestpractices.coreinfrastructure.org. Given that AppImageKit expects to have quite advanced access to repos and build pipelines of projects that use it, I'd say that some kind of security-related assessment (at least self-assessment) is mandatory for me to use it anywhere beyond testing CI snapshots.