How to contribute

We welcome contributions from everyone. If you'd like to start a discussion about the project, you can create an issue on github. If you'd prefer to keep the conversation private, you can also contact Julien Sobrier at [email protected].

For changing existing rules, please create a pull requests, and add your reasoning for the changes in the comment.

For adding risks or remediation for Kubernetes, please create a pull request for the new rule. You don't need to include the vector and score, these will be added automatically.

If you'd like to add rules for an open-source or proprietary tool, please create a new folder under risks/tools or remediations/tools.