Five Years of the GitHub Bug Bounty Program
github.blog