repository security advisories

GitHub now lets users with repository write access mark security advisory comments as confidential, giving maintainers a more restricted way to discuss sensitive remediation details.