add security alert status
fix: list security alerts belonging to the ruby application

we were listing all security alerts belonging to the gem, but it should be
the ones belonging to the gem and to the ruby application