HackerOne has a free offering for open source projects. ^^
Let me know if you have any questions (I manage it). :-)