Bring CLOMonitor Score to 100%

[hernanpl]

This repo is signed up as part of the KubeCon Security Slam. I'm bringing to your attention the checklist from the official CLOMonitor page for Thanos -- it refreshes every hour, so it should be up-to-date.

CLOMonitor report

Summary

Repository: thanos
URL: https://github.com/thanos-io/thanos
Checks sets: COMMUNITY + CODE
Score: 79

Checks passed per category

Category	Score
Documentation	97%
License	75%
Best Practices	80%
Security	75%
Legal	0%

Checks

Documentation [97%]

• Adopters (docs)
• Changelog (docs)
• Code of conduct (docs)
• Contributing (docs)
• Governance (docs)
• Maintainers (docs)
• Readme (docs)
• Roadmap (docs)
• Website (docs)

License [75%]

• Apache-2.0 (docs)
• Approved license (docs)
• License scanning (docs)

Best Practices [80%]

• Analytics (docs)
• Artifact Hub badge (docs)
• Contributor License Agreement (docs) EXEMPT
• Community meeting (docs)
• Developer Certificate of Origin (docs)
• Github discussions (docs)
• OpenSSF badge (docs)
• Recent release (docs)
• Slack precense (docs)

Security [75%]

• Binary artifacts (docs)
• Code review (docs)
• Dangerous workflow (docs)
• Dependency update tool (docs)
• Maintained (docs)
• Software bill of materials (SBOM) (docs)
• Security policy (docs)
• Signed releases (docs)
• Token permissions (docs)

Legal [0%]

• Trademark disclaimer (docs)

For more information about the checks sets available and how each of the checks work, please see the CLOMonitor's documentation.