You can now use the REST API to create a temporary private fork within a draft security advisory or private vulnerability report.

Learn more about the repository security advisories REST API