devfile/api CNCF Defender tasks - Githubissues

devfile / api

Kube-native API for cloud development workspaces specification

Apache License 2.0

257 stars 62 forks source link

devfile/api CNCF Defender tasks #1373

Open maysunfaisal opened 10 months ago

maysunfaisal commented 10 months ago

Which area/kind this issue is related to?

/area api

Issue Description

As part of CNCF CLOMonitor report - https://clomonitor.io/projects/cncf/devfile, devfile/api repo has been tagged with the code checkset https://github.com/cncf/clomonitor/blob/main/data/cncf.yaml#L521

The list of checksets and their requirement can be found at https://clomonitor.io/docs/topics/checks/

[x] Security / Code review
[x] Security / Dangerous workflow
[ ] Security / Dependency update tool
[x] Security / Maintained
[ ] Security / Insights
[ ] Security / Policy
[x] Security / Binary artifacts

michael-valdron commented 9 months ago

Wait for upcoming refinement call to review with @maysunfaisal

github-actions[bot] commented 2 weeks ago

This issue is stale because it has been open for 90 days with no activity. Remove stale label or comment or this will be closed in 60 days.