Asleep at the Keyboard? Assessing the Security of GitHub Copilot's Code Contributions