Give a final rating about chain-bench HOT 2 CLOSED

CIS benchmark is compliance-driven, unlike risk management - this is the reason it presents pass/fail statuses for each check and doesn't contain severity/score fields
But, we still might support severity/risk indication for other guidelines
feel free to add this as idea under the discussion sections

from chain-bench.

Getting some inspiration from the ossf/scorecard project, we can see that they associate each check to a risk level: https://github.com/ossf/scorecard/blob/main/docs/checks.md.

Doing this in the CIS reference would be a good step helping to move forward with the idea of a final rating.

from chain-bench.