Using GitHub to manage your first CVE