Add Minder profile

Author: evankanderson

minder-profile.yaml

@@ -0,0 +1,68 @@
+# Minder Profile to demo features
+version: v1
+type: profile
+name: demo-profile
+context:
+  provider: github
+alert: "on"
+remediate: "on"
+repository:
+  - name: main-protection
+    type: branch_protection_enabled
+    params:
+      branch: main
+    def: {}
+  - name: main-disallow-force-push
+    type: branch_protection_allow_force_pushes
+    params:
+      branch: main
+    def:
+      allow_force_pushes: false
+  - name: main-enforce-admins
+    type: branch_protection_enforce_admins
+    params:
+      branch: main
+    def:
+      enforce_admins: true
+  - name: main-enforce-review
+    type: branch_protection_require_pull_request_approving_review_count
+    params:
+      branch: main
+    def:
+      required_approving_review_count: 1
+  - type: dependabot_configured
+    def:
+      package_ecosystem: pip
+      schedule_interval: weekly
+      apply_if_file: requirements.txt
+  - name: pin-actions
+    type: actions_check_pinned_tags
+    def:
+      exclude:
+        - actions/checkout@v3
+artifact:
+  - type: artifact_signature
+    params:
+      tags: [main]
+      name: bad-python
+    def:
+      is_signed: true
+      is_verified: true
+pull_request:
+  - type: pr_vulnerability_check
+    def:
+      action: review
+      ecosystem_config:
+        - name: pypi
+          vulnerability_database_type: osv
+          vulnerability_database_endpoint: https://api.osv.dev/v1/query
+          package_repository:
+            url: https://pypi.org/pypi
+  - type: pr_trusty_check
+    def:
+      action: summary
+      ecosystem_config:
+        - name: npm
+          score: 5
+        - name: pypi
+          score: 5