GitHub's been doing CVE requests since at least 2022

https://github.blog/security/vulnerability-research/removing...

This is a good point thanks for bringing it up. Will look to capture this nuance in some updates I'm making to the site