docs: Added separate developer guide section

docs/developer-guide/code-quality-and-security-scanning.md

@@ -0,0 +1,11 @@
+# Code Quality and Security Scanning
+
+We use the following code quality and security scanning tools:
+
+* `golangci-lint` and `eslint` for compile time linting
+* [CodeQL](https://codeql.github.com/) - for semantic code analysis
+* [codecov.io](https://codecov.io/gh/argoproj/argo-cd) - for code coverage
+* [snyk.io](https://app.snyk.io/org/argoproj/projects) - for image scanning
+* [sonarcloud.io](https://sonarcloud.io/organizations/argoproj/projects) - for code scans and security alerts
+
+These are at least run daily or on each pull request.

mkdocs.yml

@@ -133,17 +133,19 @@ nav:
     - generated/kubectl-argo-rollouts/kubectl-argo-rollouts_terminate_experiment.md
     - generated/kubectl-argo-rollouts/kubectl-argo-rollouts_undo.md
     - generated/kubectl-argo-rollouts/kubectl-argo-rollouts_version.md
+- Developer Guide:
+  - Code Quality and Security Scanning: developer-guide/code-quality-and-security-scanning.md
+  - Contributing:
+    - Contribution Guide: CONTRIBUTING.md
+    - Environment Setup: getting-started/setup/index.md
+    - Releasing: releasing.md
+    - Plugins: plugins.md
 - Best Practices: best-practices.md
 - Migrating: migrating.md
 - FAQ: FAQ.md
 - Security:
   - Security Policy: security/security.md
   - Verify Release Artifacts: security/signed-release-assets.md
-- Contributing:
-  - Contribution Guide: CONTRIBUTING.md
-  - Environment Setup: getting-started/setup/index.md
-  - Releasing: releasing.md
-  - Plugins: plugins.md
 - Releases ⧉: https://github.com/argoproj/argo-rollouts/releases
 - Roadmap ⧉: https://github.com/argoproj/argo-rollouts/milestones
 - Blog ⧉: https://blog.argoproj.io/