Bring CLOMonitor Score to 100%

[hernanpl]

This repo is signed up as part of the KubeCon Security Slam. I'm bringing to your attention the checklist from the official CLOMonitor page for Argo -- it refreshes every hour, so it should be up-to-date.

CLOMonitor report

Summary

Repository: argo-workflows
URL: https://github.com/argoproj/argo-workflows
Checks sets: CODE
Score: 88

Checks passed per category

Category	Score
Documentation	100%
License	75%
Best Practices	100%
Security	80%
Legal	n/a

Checks

Documentation [100%]

• Changelog (docs)
• Contributing (docs)
• Maintainers (docs)
• Readme (docs)

License [75%]

• Apache-2.0 (docs)
• Approved license (docs)
• License scanning (docs)

Best Practices [100%]

• Artifact Hub badge (docs)
• Contributor License Agreement (docs) EXEMPT
• Developer Certificate of Origin (docs)
• OpenSSF badge (docs)
• Recent release (docs)

Security [80%]

• Binary artifacts (docs)
• Code review (docs)
• Dangerous workflow (docs)
• Dependency update tool (docs)
• Maintained (docs)
• Software bill of materials (SBOM) (docs)
• Security policy (docs)
• Signed releases (docs)
• Token permissions (docs)

For more information about the checks sets available and how each of the checks work, please see the CLOMonitor's documentation.

[eddie-knight]

whoops-- duplicate of #9769