Enable GitHub Security Advisories
Time: 2 minutes Value: Private vulnerability disclosure
Steps to Enable
Go to your repository: https://github.com/jeremylongshore/claude-code-plugins
Click Settings (top right)
In left sidebar, click Code security and analysis
Find Private vulnerability reporting section
Click Enable button
Done! ✅
What This Gives You
- Private vulnerability reporting: Security researchers can privately report vulnerabilities
- Coordinated disclosure: Fix issues before public disclosure
- Security tab: Dedicated tab for security advisories
- Notifications: Get alerts for reported vulnerabilities
- CVE assignment: GitHub can assign CVE IDs for serious issues
How Users Report Vulnerabilities
Once enabled, users will see:
- "Report a vulnerability" button in Security tab
- Private disclosure form (not public issues)
- Direct communication with maintainers
Your Response Process
- Receive private vulnerability report
- Acknowledge within 24 hours (per SECURITY.md SLA)
- Validate and develop fix
- Release patch
- Publish advisory (makes it public)
Delete this file after you've enabled the feature!