Update reporting guidelines.

[Carreau]

Now that Public GHSA opening is available on most repo, be clearer that those can be used directly.

[krassowski]

One more suggestion, but giving a green light to allow you to merge later

[Carreau]

Failures seem to be 429 too many requests as we check to many https://github.com/<user>, though the error message show a single / in https:/github... I'll try to add a ignore pattern.

[krassowski]

In JupyterLab we have https://github.com/[^/]+/?$ ignore pattern https://github.com/jupyterlab/jupyterlab/blob/main/.github/workflows/linuxtests.yml#L155

[krassowski]

But maybe it should be changed on maintainer-tools level after all, edit - it looks jupyterlab/maintainer-tools#226 already has it

[Carreau]

meh, I guess we can just force-merge. I'm not sure why it still fails.

[krassowski]

All green, merging!

[Carreau]

Thanks !