Document: using GitHub to detect vulnerable components
Document: using GitHub to detect vulnerable components

Note in our assurance case that we're using GitHub to detect vulnerable
reused components, in addition to our other processes.

Signed-off-by: David A. Wheeler <9ae72d22d8b894b865a7a496af4fab6320e6abb2@dwheeler.com>

linuxfoundation/cii-best-practices-badge,linuxfoundation/cii-best-practices-badge,yannickmoy/cii-best-practices-badge,coreinfrastructure/best-practices-badge,coreinfrastructure/best-practices-badge,coreinfrastructure/best-practices-badge,yannickmoy/cii-best-practices-badge,coreinfrastructure/best-practices-badge,linuxfoundation/cii-best-practices-badge,linuxfoundation/cii-best-practices-badge,yannickmoy/cii-best-practices-badge,yannickmoy/cii-best-practices-badge