Adopt OSSF Security Insights 1.0 specification

[achrinza]

OSSF Security Insights 1.0 specification was recently-ish announced. It defines a standard YAML file to declare a project's security processes

Adopting this specification

#todo: How exactly would LoopBack adopt this specification?

Existing implementations

• Jaegar (PR, file)

Comparisons

#todo: Add comparisons between similar standards such as:

• Security.txt
• security-README
• OpenSSF Project Security Information Specification
• others?

References

• https://openssf.org/blog/2023/10/11/openssf-introduces-the-specification-security-insights-1-0/
• https://github.com/ossf/security-insights-spec