• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1Want to contribute? Great! First, read this page (including the small print at
2the end).
3
4### Before you contribute
5Before we can use your code, you must sign the
6[Google Individual Contributor License Agreement]
7(https://cla.developers.google.com/about/google-individual)
8(CLA), which you can do online. The CLA is necessary mainly because you own the
9copyright to your changes, even after your contribution becomes part of our
10codebase, so we need your permission to use and distribute your code. We also
11need to be sure of various other things—for instance that you'll tell us if you
12know that your code infringes on other people's patents. You don't have to sign
13the CLA until after you've submitted your code for review and a member has
14approved it, but you must do it before we can put your code into our codebase.
15Before you start working on a larger contribution, you should get in touch with
16us first through the issue tracker with your idea so that we can help out and
17possibly guide you. Coordinating up front makes it much easier to avoid
18frustration later on.
19
20### Disclosure
21If your tests uncover security vulnerabilities, please first report directly to
22the maintainers of the libraries. You should only submit tests to us once the
23bugs have been acknowledged or fixed.
24
25Google has several
26[security reward programs](https://www.google.com/about/appsecurity/programs-home/)
27that provide cash rewards for quality security research that identifies or fixes
28security vulnerabilities in products that we provide or proactive security
29improvements to select open-source products. If your tests found or helped fix
30vulnerabilities that are in scope you should submit them to these programs.
31
32If you have any question with regard to disclosure, please email us at
33security@google.com.
34
35### Code reviews
36All submissions, including submissions by project members, require review. We
37use GitHub pull requests for this purpose.
38
39### The small print
40Contributions made by corporations are covered by a different agreement than
41the one above, the
42[Software Grant and Corporate Contributor License Agreement]
43(https://cla.developers.google.com/about/google-corporate).