Project Lead role required to open GitHub advisories
As discussed on the AC call today.
A project lead role is required to open an advisory on GitHub. For some projects, this may be fine; however, for Jetty, it has been a source of pain intermittently since we moved to GitHub.
I have solved this for Jetty by creating placeholder advisories with jetty-rt-committers with the right to edit and make it into a live issue.
Based on the AC call today, this may be simply an implementation detail or part of a larger question related to what a project lead role is vs. a traditional committer.