From d0676c115ab4c523a97ce65abf7253b830a4e45d Mon Sep 17 00:00:00 2001
From: Paul Carleton <paulc@anthropic.com>
Date: Fri, 28 Nov 2025 17:23:06 +0000
Subject: [PATCH] Add security-advisories team as organization security
 managers
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Creates a new security-advisories team (child of security-wg) and assigns
it the GitHub security manager role. This allows members to add collaborators
to security advisories.

Adds @jenn-newton to the security-advisories team.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 src/config/groups.ts | 6 ++++++
 src/config/users.ts  | 2 +-
 src/github.ts        | 7 +++++++
 3 files changed, 14 insertions(+), 1 deletion(-)

diff --git a/src/config/groups.ts b/src/config/groups.ts
index 73291b4..695cb1c 100644
--- a/src/config/groups.ts
+++ b/src/config/groups.ts
@@ -150,6 +150,12 @@ export const GROUPS = defineGroups([
     memberOf: ['working-groups'],
     onlyOnPlatforms: ['github'],
   },
+  {
+    name: 'security-advisories',
+    description: 'Security advisory managers (can add collaborators to advisories)',
+    memberOf: ['security-wg'],
+    onlyOnPlatforms: ['github'],
+  },
   {
     name: 'transport-wg',
     description: 'Transport Working Group',
diff --git a/src/config/users.ts b/src/config/users.ts
index b0e6ae9..b04b254 100644
--- a/src/config/users.ts
+++ b/src/config/users.ts
@@ -149,7 +149,7 @@ export const MEMBERS: readonly Member[] = [
   },
   {
     github: 'jenn-newton',
-    memberOf: ['security-wg'],
+    memberOf: ['security-advisories'],
   },
   {
     github: 'jerome3o-anthropic',
diff --git a/src/github.ts b/src/github.ts
index d398bf6..728d7a8 100644
--- a/src/github.ts
+++ b/src/github.ts
@@ -43,3 +43,10 @@ REPOSITORY_ACCESS.forEach((repo) => {
     })),
   });
 });
+
+// Assign security-advisories team as organization security managers
+// This grants members the ability to view security alerts and manage security
+// settings across all repos, including adding collaborators to security advisories
+new github.OrganizationSecurityManager('security-managers', {
+  teamSlug: 'security-advisories',
+});