devfile/api CNCF Defender tasks

[maysunfaisal]

Which area/kind this issue is related to?

/area api

Issue Description

As part of CNCF CLOMonitor report - https://clomonitor.io/projects/cncf/devfile, devfile/api repo has been tagged with the code checkset https://github.com/cncf/clomonitor/blob/main/data/cncf.yaml#L521

The list of checksets and their requirement can be found at https://clomonitor.io/docs/topics/checks/

• Security / Code review
• Security / Dangerous workflow
• Security / Dependency update tool
• Security / Maintained
• Security / Insights
• Security / Policy
• Security / Binary artifacts

[michael-valdron]

Wait for upcoming refinement call to review with @maysunfaisal

[github-actions]

This issue is stale because it has been open for 90 days with no activity. Remove stale label or comment or this will be closed in 60 days.

[Jdubrick]

Keeping open for devtools week