• Process for GHSA (GitHub Security Advisory)
  • Private Vulnerability Reporting – Reporter enters a probable security issue
  • Validate that it is a security issue - Infosec Team will determine if report is a security issue. This may require the enlistment of subject matter experts - If not deemed security issue, ask reporter to submit Bugzilla