# Contributing to the Go Vulnerability Database

Go is an open source project.

It is the work of hundreds of contributors. We appreciate your help!

## Reporting a vulnerability

To report a new *public* vulnerability,
[open an issue](https://github.com/golang/vulndb/issues/new),
send a GitHub PR, or mail a Gerrit CL.

Please read the
[Contribution Guidelines](https://golang.org/doc/contribute.html)
before sending patches.

## Contributor License Agreement

Contributions to this project must be accompanied by a Contributor License
Agreement (CLA). You (or your employer) retain the copyright to your
contribution; this simply gives us permission to use and redistribute your
contributions as part of the project. Head over to
<https://cla.developers.google.com/> to see your current agreements on file or
to sign a new one.

You generally only need to submit a CLA once, so if you've already submitted one
(even if it was for a different project), you probably don't need to do it
again.