xref: /aosp_15_r20/external/wycheproof/CONTRIBUTING.md (revision 3d322d526be0ef039eebde10aa6ae75db8cc3a3d)
1*3d322d52SAndroid Build Coastguard WorkerWant to contribute? Great! First, read this page (including the small print at
2*3d322d52SAndroid Build Coastguard Workerthe end).
3*3d322d52SAndroid Build Coastguard Worker
4*3d322d52SAndroid Build Coastguard Worker### Before you contribute
5*3d322d52SAndroid Build Coastguard WorkerBefore we can use your code, you must sign the
6*3d322d52SAndroid Build Coastguard Worker[Google Individual Contributor License Agreement]
7*3d322d52SAndroid Build Coastguard Worker(https://cla.developers.google.com/about/google-individual)
8*3d322d52SAndroid Build Coastguard Worker(CLA), which you can do online. The CLA is necessary mainly because you own the
9*3d322d52SAndroid Build Coastguard Workercopyright to your changes, even after your contribution becomes part of our
10*3d322d52SAndroid Build Coastguard Workercodebase, so we need your permission to use and distribute your code. We also
11*3d322d52SAndroid Build Coastguard Workerneed to be sure of various other things—for instance that you'll tell us if you
12*3d322d52SAndroid Build Coastguard Workerknow that your code infringes on other people's patents. You don't have to sign
13*3d322d52SAndroid Build Coastguard Workerthe CLA until after you've submitted your code for review and a member has
14*3d322d52SAndroid Build Coastguard Workerapproved it, but you must do it before we can put your code into our codebase.
15*3d322d52SAndroid Build Coastguard WorkerBefore you start working on a larger contribution, you should get in touch with
16*3d322d52SAndroid Build Coastguard Workerus first through the issue tracker with your idea so that we can help out and
17*3d322d52SAndroid Build Coastguard Workerpossibly guide you. Coordinating up front makes it much easier to avoid
18*3d322d52SAndroid Build Coastguard Workerfrustration later on.
19*3d322d52SAndroid Build Coastguard Worker
20*3d322d52SAndroid Build Coastguard Worker### Disclosure
21*3d322d52SAndroid Build Coastguard WorkerIf your tests uncover security vulnerabilities, please first report directly to
22*3d322d52SAndroid Build Coastguard Workerthe maintainers of the libraries. You should only submit tests to us once the
23*3d322d52SAndroid Build Coastguard Workerbugs have been acknowledged or fixed.
24*3d322d52SAndroid Build Coastguard Worker
25*3d322d52SAndroid Build Coastguard WorkerGoogle has several
26*3d322d52SAndroid Build Coastguard Worker[security reward programs](https://www.google.com/about/appsecurity/programs-home/)
27*3d322d52SAndroid Build Coastguard Workerthat provide cash rewards for quality security research that identifies or fixes
28*3d322d52SAndroid Build Coastguard Workersecurity vulnerabilities in products that we provide or proactive security
29*3d322d52SAndroid Build Coastguard Workerimprovements to select open-source products. If your tests found or helped fix
30*3d322d52SAndroid Build Coastguard Workervulnerabilities that are in scope you should submit them to these programs.
31*3d322d52SAndroid Build Coastguard Worker
32*3d322d52SAndroid Build Coastguard WorkerIf you have any question with regard to disclosure, please email us at
33*3d322d52SAndroid Build Coastguard Worker[email protected].
34*3d322d52SAndroid Build Coastguard Worker
35*3d322d52SAndroid Build Coastguard Worker### Code reviews
36*3d322d52SAndroid Build Coastguard WorkerAll submissions, including submissions by project members, require review. We
37*3d322d52SAndroid Build Coastguard Workeruse GitHub pull requests for this purpose.
38*3d322d52SAndroid Build Coastguard Worker
39*3d322d52SAndroid Build Coastguard Worker### The small print
40*3d322d52SAndroid Build Coastguard WorkerContributions made by corporations are covered by a different agreement than
41*3d322d52SAndroid Build Coastguard Workerthe one above, the
42*3d322d52SAndroid Build Coastguard Worker[Software Grant and Corporate Contributor License Agreement]
43*3d322d52SAndroid Build Coastguard Worker(https://cla.developers.google.com/about/google-corporate).