We've had a few dubious or outright indirect GitHub security advisories opened by people obviously trying to boost their resume or push their automated scanning

We've had a few dubious or outright indirect GitHub security advisories opened by people obviously trying to boost their resume or push their automated scanning tools. It's concerning because you don't want to become insensitive to security reports, but also some of the proposed fixes involve security sensitive project setup and this could be an avenue for exfiltrating secrets.