epic: security and vulnerabilities #210

Description

we need to define a secruity process and notifications for platform mesh github org. and how we can handle those better in github org.

Objectives

• define security process for the gh org
• how do we handle notifications? what actions need to be taken when a cve comes in?
• e.g. automated gha to create issues in repo when something is discovered in security tab ?
• how do other oss projects deal with this?

Demo Required

None

Demo Steps

No response