This must have been a problem for some time, considering how popular GitHub is. There is no way around spam when running a popular service where the users can create their own content.
CAPTCHA only security is fantastic for spammers.
Or you can buy OCR software that plugs in to your bots; e.g. captchasniper.com
Captcha'd targets are usually higher-quality and more valuable as there is some economic cost of posting to it.
Thanks God for http://bugmenot.com!