Resources for glibc CNA

Hello,

I recently proposed setting up a CNA for glibc and it looks like there's 
general consensus on us doing this.  As part of this set up we would 
need an email address (preferably one that can accept encrypted 
submissions from issue reporters) to reach the glibc security team and 
web pages to publish security advisories.

I wanted to know if this is something we could/should set up on LF 
infrastructure or if I should try and get something up on sourceware. 
Konstantin, does LF already have some infrastructure for this that we 
can share?

Thanks,
Sid