Vuln advisories and signing binaries
Vuln advisories and signing binaries

Added further suggestions to include:
1. a requirement for a project to issue vulnerability advisories
1. a requirement for executable binaries to be signed
coreinfrastructure/best-practices-badge,linuxfoundation/cii-best-practices-badge,yannickmoy/cii-best-practices-badge,linuxfoundation/cii-best-practices-badge,dwvisser/cii-best-practices-badge,taylorcoursey/cii-best-practices-badge,coreinfrastructure/best-practices-badge,jdossett/cii-best-practices-badge,dwvisser/cii-best-practices-badge,taylorcoursey/cii-best-practices-badge,jdossett/cii-best-practices-badge,wanganyv/cii-best-practices-badge,dwvisser/cii-best-practices-badge,yannickmoy/cii-best-practices-badge,wanganyv/cii-best-practices-badge,taylorcoursey/cii-best-practices-badge,coreinfrastructure/best-practices-badge,dwvisser/cii-best-practices-badge,jdossett/cii-best-practices-badge,yannickmoy/cii-best-practices-badge,linuxfoundation/cii-best-practices-badge,wanganyv/cii-best-practices-badge,coreinfrastructure/best-practices-badge,jdossett/cii-best-practices-badge,linuxfoundation/cii-best-practices-badge,wanganyv/cii-best-practices-badge,yannickmoy/cii-best-practices-badge,taylorcoursey/cii-best-practices-badge