Thanks for your interest in contributing to the Conftest project!
If you have questions, comments, or requests, feel free to create an issue on GitHub or join us on the Open Policy Agent Slack in the #conftest
channel.
We currently welcome contributions of all kinds. For example:
- Development of features, bug fixes, and other improvements.
- Documentation including reference material and examples.
- Bug and feature reports.
Small bug fixes (or other small improvements) can be submitted directly via a Pull Request on GitHub. You can expect at least one of the Conftest maintainers to respond quickly.
Before submitting large changes, please open an issue on GitHub outlining:
- The use case that your changes are applicable to.
- Steps to reproduce the issue(s) if applicable.
- Detailed description of what your changes would entail.
- Alternative solutions or approaches if applicable.
Use your judgment about what constitutes a large change. If you aren't sure, send a message to the #conftest
channel in the OPA slack or submit an issue on GitHub.
If you are contributing code, please consider the following:
- Most changes should be accompanied by tests.
- All commits must be signed off (see next section).
- Related commits must be squashed before they are merged.
- All tests must pass.
If you are new to Go, consider reading Effective Go and Go Code Review Comments for guidance on writing idiomatic Go code.
Commit messages should explain why the changes were made and should probably look like this:
Description of the change in 50 characters or less
More detail on what was changed. Provide some background on the issue
and describe how the changes address the issue. Feel free to use multiple
paragraphs, but please keep each line under 72 characters or so.
If your changes are related to an open issue (bug or feature), please include the following line at the end of your commit message:
Fixes #<ISSUE_NUMBER>
The OPA project requires that contributors sign off on changes submitted to OPA repositories. As Conftest is now part of the OPA repositories, Conftest requires contributors sign off on changes as well. The Developer Certificate of Origin (DCO) is a simple way to certify that you wrote or have the right to submit the code you are contributing to the project.
The DCO is a standard requirement for Linux Foundation and CNCF projects.
You sign-off by adding the following to your commit messages:
This is my commit message
Signed-off-by: Random J Developer <[email protected]>
Git has a -s
command line option to do this automatically.
git commit -s -m 'This is my commit message'
You can find the full text of the DCO here: https://developercertificate.org/
Before a Pull Request is merged, it will undergo code review from other members of the OPA community. In order to streamline the code review process, when amending your Pull Request in response to a review, do not squash your changes into relevant commits until it has been approved for merge. This allows the reviewer to see what changes are new and removes the need to wade through code that has not been modified to search for a small change.
When adding temporary patches in response to review comments, consider formatting the message subject like one of the following:
Fixup into commit <commit ID> (squash before merge)
Fixed changes requested by @username (squash before merge)
Amended <description> (squash before merge)
The purpose of these formats is to provide some context into the reason the temporary commit exists, and to label it as needing to be squashed before a merge is performed.
It is worth noting that not all changes need be squashed before a merge is performed. Some changes made as a result of the review stand well on their own, independent of other commits in the series. Such changes should be made into their own commit and added to the PR.
If your Pull Request is small though, it is acceptable to squash changes during
the review process. Use your judgment about what constitutes a small Pull
Request. If you aren't sure, send a message to the #conftest
channel on the OPA slack or post a comment on the Pull Request.