The user, as the government agency getting the outcome of the contractors work, already has access to the source code most of the time.
All the government projects I worked on, used SCM systems managed by government IT departments.
Also zero contributions were made back from the FOSS stuff that were used in the project, they were kept in their IT SCM repositories.