What is a Security Advisory used for?

• A. To log performance issues.
• B. To privately discuss impact, fix vulnerability in private fork, and then publish to alert your community.
• C. To assign issues to developers.
• D. To revert commits automatically.

Answer: (B)

Security advisories are designed to coordinate vulnerability handling privately. They provide a space for maintainers to discuss the advisory’s impact, plan and test fixes in a controlled way (often using a private fork or branch), and then publish the advisory to alert the community with clear remediation steps. This workflow helps prevent premature disclosure and ensures a vetted fix is available before users are informed. The other options describe unrelated activities—logging performance issues, simply assigning issues to developers, or automatically reverting commits—which are not the purpose of a security advisory.