The GitHub team announced support for security vulnerability alerts for Java and .NET platforms.
With security vulnerability alerts, organization owners and repository admins receive a notification when any of their projects has a dependency with a known vulnerability.`
https://blog.hildenco.com/2018/10/integrated-security-vulnerability.html