GitHub leans on hybrid detection model to expand vulnerability coverage