devfile/api CNCF Cleaner Tasks

[maysunfaisal]

Which area/kind this issue is related to?

/area api

Issue Description

As part of CNCF CLOMonitor report - https://clomonitor.io/projects/cncf/devfile, devfile/api repo has been tagged with the code checkset https://github.com/cncf/clomonitor/blob/main/data/cncf.yaml#L521

The list of checksets and their requirement can be found at https://clomonitor.io/docs/topics/checks/

• Documentation / Changelog
• Documentation / Contributing
• Documentation / Maintainers
• Documentation / Readme
• License
• License / Approved
• License / Scanning
• Best practices / Artifact Hub badge
• Best practices / CLA
• Best practices / DCO
• Best practices / OpenSSF best practices badge
• Best practices / OpenSSF Scorecard badge
• Best practices / Recent release

[Jdubrick]

Badge was created for api repo here. Will have to open separate issues dedicated to going through each badge item and checking it for completeness. Every repo tagged as Code on CLOMonitor will need to have their own badge.

[Jdubrick]

Opened a PR that covers all tasks but the OpenSSF Scorecard Badge as it requires setting up GitHub Workflows. Will see what the team thinks after the recharge when everyone returns.