i found a vulnerability in your git repo so if i reported bugs and vulnerabilities can i get a reward bounty ?