[opensource-wg] Opt-in vulnerability-finding service for OSS