Pentagon’s vulnerability disclosure program developing expansion plans to cover more contractors