devfile/library CNCF Defender tasks

[maysunfaisal]

Which area/kind this issue is related to?

/area library

Issue Description

As part of CNCF CLOMonitor report - https://clomonitor.io/projects/cncf/devfile, devfile/library repo has been tagged with the code-lite but i think it should be code and its checkset https://github.com/cncf/clomonitor/blob/main/data/cncf.yaml#L521

The list of checksets and their requirement can be found at https://clomonitor.io/docs/topics/checks/

• Security / Code review
• Security / Dangerous workflow
• Security / Dependency update tool
• Security / Maintained
• Security / Insights
• Security / Policy
• Security / Binary artifacts

[michael-valdron]

Wait for upcoming refinement call to review with @maysunfaisal