Compare OpenProject confidential work packages with the GitHub Security Advisories option once OpenProject has answered, then a separate proposal and vote.
Brainstorming: https://forum.xwiki.org/t/report-security-issues-through-github-security-advisories-instead-of-jira/18951