1*3d322d52SAndroid Build Coastguard WorkerWant to contribute? Great! First, read this page (including the small print at 2*3d322d52SAndroid Build Coastguard Workerthe end). 3*3d322d52SAndroid Build Coastguard Worker 4*3d322d52SAndroid Build Coastguard Worker### Before you contribute 5*3d322d52SAndroid Build Coastguard WorkerBefore we can use your code, you must sign the 6*3d322d52SAndroid Build Coastguard Worker[Google Individual Contributor License Agreement] 7*3d322d52SAndroid Build Coastguard Worker(https://cla.developers.google.com/about/google-individual) 8*3d322d52SAndroid Build Coastguard Worker(CLA), which you can do online. The CLA is necessary mainly because you own the 9*3d322d52SAndroid Build Coastguard Workercopyright to your changes, even after your contribution becomes part of our 10*3d322d52SAndroid Build Coastguard Workercodebase, so we need your permission to use and distribute your code. We also 11*3d322d52SAndroid Build Coastguard Workerneed to be sure of various other things—for instance that you'll tell us if you 12*3d322d52SAndroid Build Coastguard Workerknow that your code infringes on other people's patents. You don't have to sign 13*3d322d52SAndroid Build Coastguard Workerthe CLA until after you've submitted your code for review and a member has 14*3d322d52SAndroid Build Coastguard Workerapproved it, but you must do it before we can put your code into our codebase. 15*3d322d52SAndroid Build Coastguard WorkerBefore you start working on a larger contribution, you should get in touch with 16*3d322d52SAndroid Build Coastguard Workerus first through the issue tracker with your idea so that we can help out and 17*3d322d52SAndroid Build Coastguard Workerpossibly guide you. Coordinating up front makes it much easier to avoid 18*3d322d52SAndroid Build Coastguard Workerfrustration later on. 19*3d322d52SAndroid Build Coastguard Worker 20*3d322d52SAndroid Build Coastguard Worker### Disclosure 21*3d322d52SAndroid Build Coastguard WorkerIf your tests uncover security vulnerabilities, please first report directly to 22*3d322d52SAndroid Build Coastguard Workerthe maintainers of the libraries. You should only submit tests to us once the 23*3d322d52SAndroid Build Coastguard Workerbugs have been acknowledged or fixed. 24*3d322d52SAndroid Build Coastguard Worker 25*3d322d52SAndroid Build Coastguard WorkerGoogle has several 26*3d322d52SAndroid Build Coastguard Worker[security reward programs](https://www.google.com/about/appsecurity/programs-home/) 27*3d322d52SAndroid Build Coastguard Workerthat provide cash rewards for quality security research that identifies or fixes 28*3d322d52SAndroid Build Coastguard Workersecurity vulnerabilities in products that we provide or proactive security 29*3d322d52SAndroid Build Coastguard Workerimprovements to select open-source products. If your tests found or helped fix 30*3d322d52SAndroid Build Coastguard Workervulnerabilities that are in scope you should submit them to these programs. 31*3d322d52SAndroid Build Coastguard Worker 32*3d322d52SAndroid Build Coastguard WorkerIf you have any question with regard to disclosure, please email us at 33*3d322d52SAndroid Build Coastguard Worker[email protected]. 34*3d322d52SAndroid Build Coastguard Worker 35*3d322d52SAndroid Build Coastguard Worker### Code reviews 36*3d322d52SAndroid Build Coastguard WorkerAll submissions, including submissions by project members, require review. We 37*3d322d52SAndroid Build Coastguard Workeruse GitHub pull requests for this purpose. 38*3d322d52SAndroid Build Coastguard Worker 39*3d322d52SAndroid Build Coastguard Worker### The small print 40*3d322d52SAndroid Build Coastguard WorkerContributions made by corporations are covered by a different agreement than 41*3d322d52SAndroid Build Coastguard Workerthe one above, the 42*3d322d52SAndroid Build Coastguard Worker[Software Grant and Corporate Contributor License Agreement] 43*3d322d52SAndroid Build Coastguard Worker(https://cla.developers.google.com/about/google-corporate).