I generally agree. I've seen a few challenges to this perspective. 1) Some agencies do not think using 3rd party services like github is allowed. 2) Different groups make the initial code release pretty time consuming (as, in part, it should be) as, through time, the history may have accumulated secrets/keys/other sensitive material. So very thorough reviews are sometimes required. 3) Some agencies allow the use of github (and the like), but make the process of getting code up there extremely challenging. For example, some groups require all changes to code to go through the same internal review process as traditional communication, like a scientific publication or press release (internal review, multiple levels of management, etc).
Of course, the last one is the worst. A lot of groups are getting their act together when it comes to starting open-source, but it is met with a lot of skepticism.
Of course, the last one is the worst. A lot of groups are getting their act together when it comes to starting open-source, but it is met with a lot of skepticism.