CG Alerts for SBRP

[ellahathaway]

SBRP repo defines packages for multiple vulnerable packages in the across the main, 9.0, and 8.0 branches:

• System.Formats.Asn1.8.0.0: main, 9.0
• System.Formats.Asn1.7.0.0: main, 9.0, 8.0
• System.Formats.Asn1.5.0.0: main, 9.0, 8.0
• System.Security.Cryptography.Pkcs.7.0.0: main, 9.0, 8.0
• System.Security.Cryptography.Pkcs.6.0.1: main, 9.0, 8.0
• System.Text.Json.7.0.3: main, 9.0

I couldn't figure out the best area label to add to this issue. If you have write-permissions please help me learn by adding exactly one area label.

I couldn't figure out the best area label to add to this issue. If you have write-permissions please help me learn by adding exactly one area label.

[MichaelSimons]

This is superceded by #4838 which will disable CG for SBRP packages.