cncf: self-assessment doc

[lsm5]

This is being added here only for review. This doc will live in https://github.com/cncf/tag-security and probably be removed from here.

What type of PR is this?

/kind other

What this PR does / why we need it:

Review submission for cncf/tag-security.

How to verify it

Just a doc. Review if it's good for CNCF submission.

Which issue(s) this PR fixes:

None

Special notes for your reviewer:

None

Does this PR introduce a user-facing change?

None

Reference: https://github.com/cncf/tag-security/blob/main/community/assessments/guide/self-assessment.md

[packit-as-a-service[bot]]

Ephemeral COPR build failed. @containers/packit-build please check.

[lsm5]

@containers/buildah-maintainers PTAL

[TomSweeneyRedHat]

LGTM some unhappy tests which I suspect are flakes. I'll give them a kick.

[lsm5]

@nalind @flouthoc PTAL as well. I'll most likely combine the common parts (review / security process) etc with the podman doc which is now at https://github.com/cncf/toc/blob/main/projects/podman-containers/security-assessment/self-assessment.md

[openshift-ci[bot]]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: flouthoc, lsm5

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• ~~OWNERS~~ [flouthoc,lsm5]

Approvers can indicate their approval by writing /approve in a comment Approvers can cancel approval by writing /approve cancel in a comment