GitHub will pay you to write new rules for this.

https://securitylab.github.com/bounties