Implement SECURITY-Insights.md

SECURITY-INSIGHTS.yml

@@ -0,0 +1,33 @@
+header:
+  schema-version: 1.0.0
+  last-updated: '2024-03-01'
+  last-reviewed: '2024-03-01'
+  expiration-date: '2025-03-01T10:00:00.000Z'
+  project-url: https://github.com/devfile/library
+  project-release: 'v2.2.1'
+  commit-hash: '6aa1b8339d39e9c2db403d3817cb552d428d19e4'
+  license: 'https://raw.githubusercontent.com/devfile/library/main/LICENSE'
+project-lifecycle:
+  status: active
+  bug-fixes-only: false
+  core-maintainers:
+  - github:michael-valdron
+  - github:Jdubrick
+  - github:thepetk
+  release-cycle: https://github.com/devfile/library/blob/main/README.md#releases
+security-testing:
+- tool-type: sca
+  tool-name: Dependabot
+  comment: |
+    Dependabot is enabled for this repo.
+contribution-policy:
+  accepts-pull-requests: true
+  accepts-automated-pull-requests: true
+  contributing-policy: https://github.com/devfile/library/blob/main/CONTRIBUTING.md
+  code-of-conduct: https://github.com/devfile/api/blob/main/CODE_OF_CONDUCT.md
+documentation:
+- https://github.com/devfile/library/blob/main/README.md#usage
+dependencies:
+  third-party-packages: true
+  dependencies-lists:
+  - https://github.com/devfile/library/blob/main/go.mod