self-assessment: add Lima

[AkihiroSuda]

Add self-assessment of Lima (CNCF Sandbox)

cc @jandubois @afbjorklund @balajiv113

[netlify]

✅ Deploy Preview for tag-security ready!

Name	Link
🔨 Latest commit	07c348d
🔍 Latest deploy log	https://app.netlify.com/sites/tag-security/deploys/672d5c1308929900084f2598
😎 Deploy Preview	https://deploy-preview-1264--tag-security.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[JustinCappos]

A few issues with the checks + being out of date with the base branch. Seems fine to merge after.

[AkihiroSuda]

Why is this failing?
https://github.com/cncf/tag-security/actions/runs/11733542958/job/32688010333?pr=1264

FILE: community/assessments/projects/lima/self-assessment.md
make: *** [Makefile:25: links] Error 1

[AkihiroSuda]

The links work for me

$ npx markdown-link-check --verbose ./community/assessments/projects/lima/self-assessment.md 

FILE: ./community/assessments/projects/lima/self-assessment.md
  [✓] #metadata → Status: 200
  [✓] #security-links → Status: 200
  [✓] #overview → Status: 200
  [✓] #actors → Status: 200
  [✓] #actions → Status: 200
  [✓] #background → Status: 200
  [✓] #goals → Status: 200
  [✓] #non-goals → Status: 200
  [✓] #self-assessment-use → Status: 200
  [✓] #security-functions-and-features → Status: 200
  [✓] #project-compliance → Status: 200
  [✓] #secure-development-practices → Status: 200
  [✓] #security-issue-resolution → Status: 200
  [✓] #appendix → Status: 200
  [✓] https://github.com/lima-vm/lima → Status: 200
  [✓] https://github.com/lima-vm/.github/blob/main/SECURITY.md → Status: 200
  [✓] https://github.com/lima-vm/lima/blob/master/templates/default.yaml → Status: 200
  [✓] https://lima-vm.io/ → Status: 200
  [✓] https://containerd.io → Status: 200
  [✓] https://github.com/containerd/nerdctl → Status: 200
  [✓] https://github.com/lima-vm/lima/tree/master/templates → Status: 200
  [✓] https://github.com/lima-vm/socket_vmnet → Status: 200
  [✓] https://lima-vm.io/docs/community/contributing/ → Status: 200
  [✓] https://github.com/lima-vm/lima/blob/master/.github/dependabot.yml → Status: 200
  [✓] https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck → Status: 200
  [✓] https://github.com/lima-vm/lima/security → Status: 200
  [✓] https://lima-vm.io/docs/community/ → Status: 200
  [✓] https://rancherdesktop.io/ → Status: 200
  [✓] https://github.com/abiosoft/colima → Status: 200
  [✓] https://github.com/runfinch/finch → Status: 200
  [✓] https://podman-desktop.io/ → Status: 200
  [✓] https://github.com/lima-vm/lima/security/advisories/new → Status: 200
  [✓] https://github.com/lima-vm/lima/security/advisories → Status: 200
  [✓] https://github.com/lima-vm/lima/security/advisories/GHSA-f7qw-jj9c-rpq9 → Status: 200
  [✓] https://www.bestpractices.dev/en/projects/6505 → Status: 200
  [✓] https://github.com/unixorn/lima-xbar-plugin → Status: 200
  [✓] https://github.com/afbjorklund/lima-gui → Status: 200

  37 links checked.

[brandtkeller]

Hey @AkihiroSuda - thanks for calling this out. It appears there is an issue with the linting checks that should be fixed in #1403 .

Nonetheless I checked your PR locally and agree that it is indeed passing that check when the check is functionality as intended.

[AkihiroSuda]

Could I mark this as Completed?
What is the criteria?