The Open XDR Architecture (OXA) effort is a sub-project of the Open Cybersecurity Alliance (OCA). OCA is an OASIS Open Project and welcomes participation by anyone, whether affiliated with OASIS or not. Substantive contributions and feedback are invited from all parties, following the common conventions for participation in GitHub public repository projects.
Participation is expected to be consistent with politeness and everyone's respect, the licenses applicable for each repository, and the acceptance of our Contributor License Agreement, generally at the time of first contribution.
When contributing to the repositories in this project, please first discuss significant changes you wish to make via issue, email, GitHub discussion, or via the project's email list.
- Have something to say: join us at slack (find how to join in README), or create a ticket at GitHub Issues.
- Report bugs: report bugs at GitHub Issues.
- Fix bugs: look through the GitHub Issues for bugs to fix.
- Implement features: look through the GitHub Issues for features to implement.
- Write documentation: we use the Google Style docstrings in our source code.
And the most important:
- Share your product ingestion mapper: submit a PR to the OXA repo (link coming soon).
- Share your product automation mapper: submit a PR to the OXA automation repository (link coming soon)
One of the best ways to communicate with the rest of the project contributors is by opening a GitHub issue!
Longer discussions can be taken up on the GitHub Discussions list or via the OXA mailing list.
Discussions are a relatively new feature in GitHub that function like a chat service. You can find the Discussions link next to the link for Pull Requests.
The general mailing list requires that you subscribe before you can send.
General announcements are posted to the general mailing list and may be posted to other communications channels as well.
The OXA sub-project uses the OCA community uses Slack for ad hoc discussion. If you wish to join the #oxa channel, use this invite.
When you first submit a pull request, CLA Assistant, a bot, will check to see whether you have previously signed the Individual CLA. If you have already done so, this check will pass. If not, the bot will comment on the PR with a link and instruction for you to click and sign the CLA electronically via GitHub. If you use different GitHub accounts for work and personal use, please make sure you are signed in to the correct account.