Open a GitHub issue for a security record

[fricklerhandwerk]

As a security team member, I want to publish a triaged security issue to GitHub so it can be collaborated on. Doing this should:

Note

For now, escape maintainer names in backticks so we don't actually ping people yet

• Post data from the tracker into the GitHub issue description

  • Title: CVE title
  • Body: CVE Description, CVE ID with link, CVSS as details
  • Package names with descriptions
    • channels in details, with source links

• Ping or assign maintainers of affected packages in the issue

• Add GitHub issue labels based on the tracker data

Depends on:

• View a list of already triaged suggestions #208
• Allow configuring a repo on which to post issues #399

Implementation notes:

• We should eventually be able to overwrite the issue body from the tracker, but only if it hasn't change since our last write (maintainers may have edited the issue text and we don't want to lose that data)