CNCF Cleaner Tasks for devfile/devfile-web

[Jdubrick]

Which area/kind this issue is related to?

Issue Description

As part of our effort to maintain best practices we have added all of our repositories to the CLO Monitor. This issue aims to resolve the checks needed for our repositories to reach 100% on the monitor.

A list of the checks for each check set can be found here: https://clomonitor.io/docs/topics/checks/

Remaining Items

Documentation

• Changelog

License

• License Scanning

Best Practices

• Artifact Hub Badge
• OpenSSF Best Practices Badge
• OpenSSF Scorecard Badge
• Recent Release

[openshift-ci]

@Jdubrick: The label(s) area/devfile-web cannot be applied, because the repository doesn't have them.

In response to this:

Which area/kind this issue is related to?

/area devfile-web

Issue Description

As part of our effort to maintain best practices we have added all of our repositories to the CLO Monitor. This issue aims to resolve the checks needed for our repositories to reach 100% on the monitor.

A list of the checks for each check set can be found here: https://clomonitor.io/docs/topics/checks/

Remaining Items

Documentation

• Changlog

License

• License Scanning

Best Practices

• Artifact Hub Badge
• OpenSSF Best Practices Badge
• OpenSSF Scorecard Badge
• Recent Release

Security

• Dependencies Policy
• Software Bill of Materials (SBOM)
• Security Insights
• Security Policy
• Signed Releases
• Token Permissions

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[Jdubrick]

All Cleaner tasks were sized as 3 days with Major priority. Assigning these and moving to backlog.

[Jdubrick]

PR was opened here to resolve the checklist items. Both the changelog and the recent release check should remain missed on the monitor as devfile-web does not have any releases and subsequently does not have a changelog.