Flux security self assessment (#1467)

* Add Flux security self-assessment

Add Flux security self-assessment

Signed-off-by: Thomas Ehling <[email protected]>

* Define Self-Assessment Use and Scope

Signed-off-by: Stefan Prodan <[email protected]>

* Improve wording around CRDs and APIs

Signed-off-by: Matheus Pimenta <[email protected]>

* Improve wording for source-controller description

Signed-off-by: Matheus Pimenta <[email protected]>

* Add source tempering protection to Security Non-Goals

Signed-off-by: Stefan Prodan <[email protected]>

* Add CII Best Practices and OpenSSF scorecard to Appendix

Signed-off-by: Stefan Prodan <[email protected]>

* Expend the Action section and add Audit Trail

Signed-off-by: Stefan Prodan <[email protected]>

---------

Signed-off-by: Thomas Ehling <[email protected]>
Signed-off-by: Stefan Prodan <[email protected]>
Signed-off-by: Matheus Pimenta <[email protected]>
Co-authored-by: Thomas Ehling <[email protected]>
Co-authored-by: Stefan Prodan <[email protected]>
Co-authored-by: Matheus Pimenta <[email protected]>

Author: 4 people