manage vulnerability disclosure

Before we would start implementing this, we need to estimate the time and effort it takes.

Reference: https://github.blog/security/vulnerability-research/a-maintainers-guide-to-vulnerability-disclosure-github-tools-to-make-it-simple/