chore(github): Updated security documentation and CLOMonitor exemptions (#2333)

* Updated security documentation and CLOMonitor exemptions

Signed-off-by: Eddie Knight <knight@linux.com>

* Added license scanning exepmtion

Signed-off-by: Eddie Knight <knight@linux.com>

* Added best practices badge to README

Signed-off-by: Eddie Knight <knight@linux.com>

---------

Signed-off-by: Eddie Knight <knight@linux.com>
Co-authored-by: Jason Meridth <jmeridth@gmail.com>
This commit is contained in:
Eddie Knight 2023-11-06 09:10:35 -06:00 committed by GitHub
parent f634cf6e9c
commit 622aee3850
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
4 changed files with 32 additions and 0 deletions

23
SECURITY-INSIGHTS.yml Normal file
View file

@ -0,0 +1,23 @@
header:
schema-version: '1.0.0'
expiration-date: '2024-11-04T10:00:00.000Z'
project-url: https://github.com/argoproj/argo-helm
project-lifecycle:
status: active
bug-fixes-only: false
core-maintainers:
- https://github.com/mkilchhofer
- https://github.com/jmeridth
contribution-policy:
accepts-pull-requests: true
accepts-automated-pull-requests: true
distribution-points:
- https://github.com/argoproj/argo-helm/blob/main/SECURITY.md
vulnerability-reporting:
accepts-vulnerability-reports: true
email-contact: cncf-argo-maintainers@lists.cncf.io
security-policy: https://github.com/argoproj/argo-helm/blob/main/SECURITY.md
comment: Please refer to the security policy for reporting information prior to using the email contact.
dependencies:
env-dependencies-policy:
policy-url: https://github.com/argoproj/argo-helm/blob/master/CONTRIBUTING.md#new-application-versions