Bring CLOMonitor Score to 100%

[hernanpl]

This repo is signed up as part of the KubeCon Security Slam. I'm bringing to your attention the checklist from the official CLOMonitor page for Argo -- it refreshes every hour, so it should be up-to-date.

CLOMonitor report

Summary

Repository: argo-events URL: https://github.com/argoproj/argo-events Checks sets: CODE Score: 85

Checks passed per category

Category	Score
Documentation	100%
License	75%
Best Practices	94%
Security	75%
Legal	n/a

Checks

Documentation [100%]

• [x] Changelog (docs)
• [x] Contributing (docs)
• [x] Maintainers (docs)
• [x] Readme (docs)

License [75%]

• [x] Apache-2.0 (docs)
• [x] Approved license (docs)
• [ ] License scanning (docs)

Best Practices [94%]

• [ ] Artifact Hub badge (docs)
• [x] Contributor License Agreement (docs) EXEMPT
• [x] Developer Certificate of Origin (docs)
• [x] OpenSSF badge (docs)
• [x] Recent release (docs)

Security [75%]

• [x] Binary artifacts (docs)
• [x] Code review (docs)
• [x] Dangerous workflow (docs)
• [x] Dependency update tool (docs)
• [x] Maintained (docs)
• [x] Software bill of materials (SBOM) (docs)
• [x] Security policy (docs)
• [ ] Signed releases (docs)
• [x] Token permissions (docs)

For more information about the checks sets available and how each of the checks work, please see the CLOMonitor's documentation.

[eddie-knight]

Seems I am still missing something in the Token Permissions... the check isn't passing yet, though I expected it to be green by now. Will look again later today.

[github-actions[bot]]

This issue has been automatically marked as stale because it has not had any activity in the last 60 days. It will be closed if no further activity occurs. Thank you for your contributions.