Security Slam 2023 umbrella issue

[matthyx]

CLOMonitor report

Summary

Repository: kubevuln URL: https://github.com/kubescape/kubevuln Checks sets: CODE Score: 82

Checks passed per category

Category	Score
Documentation	100%
License	100%
Best Practices	63%
Security	67%
Legal	n/a

Checks

Documentation [100%]

• [x] Changelog (docs)
• [x] Contributing (docs)
• [x] Maintainers (docs)
• [x] Readme (docs)

License [100%]

• [x] Apache-2.0 (docs)
• [x] Approved license (docs)
• [x] License scanning (docs)

Best Practices [63%]

• [ ] Artifact Hub badge (docs)
• [x] Contributor License Agreement (docs) EXEMPT
• [x] Developer Certificate of Origin (docs)
• [ ] OpenSSF best practices badge (docs)
• [x] OpenSSF Scorecard badge (docs)
• [x] Recent release (docs)

Security [67%]

• [x] Binary artifacts (docs)
• [x] Code review (docs)
• [x] Dangerous workflow (docs)
• [ ] Dependencies policy (docs) CHECK FAILED
• [x] Dependency update tool (docs)
• [x] Maintained (docs)
• [ ] Software bill of materials (SBOM) (docs)
• [ ] Security insights (docs) CHECK FAILED
• [x] Security policy (docs)
• [ ] Self-Assessment (docs) CHECK FAILED
• [ ] Signed releases (docs)
• [x] Token permissions (docs)

For more information about the checks sets available and how each of the checks work, please see the CLOMonitor's documentation.