The OSSF (Open Source Security Foundation) has a nice guide on how to become a CNA [0]. It's pretty involved though.

[0] https://github.com/ossf/wg-vulnerability-disclosures/blob/ma...