The contribution ladder
Guerrilla accepts contributions at four rungs. Each rung has a matching GitHub issue template in the module repository, and every rung is credited. The fixture requirement is what lets a maintainer accept a check from a stranger: the proof arrives with the contribution.
- Report a wrong verdict. You ran an assessment and a verdict is wrong for your tenant shape. Open an issue with the check ID and the situation. You do not need to write any code; the tenant shape you describe becomes a fixture.
- Propose a check. You know a misconfiguration worth catching that no check covers. Describe the setting, where it is read from, and what good and bad look like.
- Contribute fixture data. You have an unusual real tenant shape worth capturing. A sanitized fixture from the real world is worth more than ten invented ones.
- Write the check and its fixtures. The full rung: the check function, its definition, and the three assertions (clean PASS, known-bad FAIL, uncollectable Not Assessed) as golden fixtures. See the validation page for a complete worked example.