[Bug]: best practices manifest missing

[nutjob4life]

Checked for duplicates

Yes - I've already checked

Describe the bug

When I ran slim apply --best-practice-ids secrets-github… I got an error:

⠋ Applying secrets-github...2026-03-04 13:33:07,637 - ERROR - Failed to fetch best practices: 404 Client Error: Not Found for url: https://raw.githubusercontent.com/NASA-AMMOS/slim/main/static/data/slim-registry.json
No practices found or failed to fetch practices.
❌ Error applying best practices: 1

I then tried to list the best practices:

$ slim list
⠋ Connecting to SLIM registry...2026-03-04 13:35:04,368 - ERROR - Failed to fetch best practices: 404 Client Error: Not Found for url: https://raw.githubusercontent.com/NASA-AMMOS/slim/main/static/data/slim-registry.json
2026-03-04 13:35:04,369 - ERROR - No practices found or failed to fetch practices
No practices found or failed to fetch practices

but it failed too.

What did you expect?

I expected the repository listed to gain secrets detection, and the list of practices to be listed.

Reproducible steps

mirasol 211 % python3.11 -m venv slim-test
mirasol 212 % cd slim-test/
/Users/kelly/slim-test
mirasol 213 % bin/pip install --quiet slim-cli

[notice] A new release of pip is available: 25.2 -> 26.0.1
[notice] To update, run: /Users/kelly/slim-test/bin/python3.11 -m pip install --upgrade pip
16.738u 7.587s 0:28.56 85.1%	0+0k 0+0io 2876pf+0w
mirasol 214 % bin/pip list | egrep -i slim
slim-cli                  2.0.0
mirasol 215 % bin/slim  apply --best-practice-icds secrets-github --repo-dir /tmp
Usage: slim apply [OPTIONS]
Try 'slim apply --help' for help.
╭─ Error ──────────────────────────────────────────────────────────────────────────────────────────────────────────────╮
│ No such option: --best-practice-icds Did you mean --best-practice-ids?                                               │
╰──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯
mirasol 216 % bin/slim apply --best-practice-ids secrets-github --repo-dir /tmp
⠋ Applying secrets-github...2026-03-04 13:33:07,637 - ERROR - Failed to fetch best practices: 404 Client Error: Not Found for url: https://raw.githubusercontent.com/NASA-AMMOS/slim/main/static/data/slim-registry.json
No practices found or failed to fetch practices.
❌ Error applying best practices: 1
mirasol 217 % bin/slim list
⠋ Connecting to SLIM registry...2026-03-04 13:36:20,415 - ERROR - Failed to fetch best practices: 404 Client Error: Not Found for url: https://raw.githubusercontent.com/NASA-AMMOS/slim/main/static/data/slim-registry.json
2026-03-04 13:36:20,415 - ERROR - No practices found or failed to fetch practices
No practices found or failed to fetch practices.

Environment

`pip list` says `slim-cli==2.0.0` is installed and `bin/slim --version` says `SLIM CLI v2.0.0`.

Running with Python 3.11 on macOS 26.3

[jpl-jengelke]

The URL changed to https://raw.githubusercontent.com/NASA-AMMOS/slim/main/static/data/registry.json . (Note that slim-registry.json changed names to registry.json.) I haven't investigated yet whether the content was altered, which may cause other issues.

[nutjob4life]

Thanks @jpl-jengelke. The URL change is fine—but only if the software changes too. Or alternatively, it'd be nice if a 301 redirect could be left in place.

Even nicer: maybe we include a copy of the .json file as a package resource so that it can work in "offline" mode as a fallback! 😉