Code repository hosting service GitHub announced that it has paid out more than $1.5 million through its bug bounty program since 2016.