Backlog: Adopt OpenJS CNA for CVE Operations #1576

This issue is for tracking the initiative to adopt OpenJS CNA for CVE Operations.

Blockers:

• We are waiting until Phase 1: Build the API OpenJS CNA API to support project operations openjs-foundation/security-wg#337 is completed to porperly test the workflow with NCU

Backlog:

• Update Node.js Security process documentation (doc: document OpenJS CNA publication step in security release node#63894)
• Add support to the OpenJS CNA to NCU (Support OpenJS Foundation CNA as CVE source node-core-utils#1093)
• Check how the H1 integration will work (confirm workflow and data details)
• Check if @UlisesGascon can get an API Token in H1 to validate the implementation

References:

• OpenJS CNA API to support project operations openjs-foundation/security-wg#337