Add GHAS security vulnerability counts to Git Provider Receiver

[adrielp]

Overview

Add a metric for number of GHAS identified security vulnerabilities. This should be achievable through a GraphQL query and incorporated into the github scraper.

A quick vulnerability count per repository GraphQL query could mirror what is below but requires some TLC.

query getRepo($name: String!, $owner: String!){
  repository(name: $name, owner: $owner) {
    id
    vulnerabilityAlerts(first: 100) {
      edges {
        node {
          id
        }
      }
    }
  }
}

Things to note:

• this would only be for the github scraper. This may be difficult as it may require a metadata.yaml within the scraper, but not be supported by the way we've written the code & might require some refactor
• the metric should be disabled by default requiring the config feature flag
• attributes should be attached which includes repo name, severity, and CVE number (maybe).

Tasks

Preview Give feedback

1. Promote to delivery collector and start getting this metrics.
2. Make sure any tickets are created to update visualization and other metrics

[adrielp]

This should be attached to a new milestone focused around engineering defaults & opinions. Will do that later