How can you assign advisories to a team for remediation?

• A. Email everyone individually after the release.
• B. Use the Security tab to assign to a team or maintainers; include relevant parties in the advisory.
• C. Create an issue and assign it to no one.
• D. Keep it unassigned to avoid accountability.

Answer: (B)

Assigning advisories to the right people is essential for a coordinated remediation. In GitHub, you manage who handles an advisory by using the Security tab to assign it to a team or to specific maintainers, and by including all relevant parties in the advisory. This creates clear ownership, ensures notifications reach the right people, and keeps the remediation process tracked in one place with status updates and discussion. Doing it by emailing individuals one by one is error-prone and hard to track, and creating an issue without an assignee or leaving the advisory unassigned creates ambiguity about responsibility and can delay fixes.