Welcome to PowerStig! We're thrilled that you'd like to contribute!
There are a few different ways you can contribute:
If you're just starting out with GitHub, start by reading the excellent guide to getting started with GitHub over on the DscResources repository.
If you have any questions or concerns, feel free to reach out to @athaynes, @jcwalker, or @regedit32 for help.
This project welcomes contributions and suggestions. Most contributions require you to agree to a Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us the rights to use your contribution. For details, visit https://cla.microsoft.com.
When you submit a pull request, a CLA-bot will automatically determine whether you need to provide a CLA and decorate the PR appropriately (e.g., label, comment). Simply follow the instructions provided by the bot. You will only need to do this once across all repos using our CLA.
This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.
Submitting an issue to PowerStig is easy!
Here are the steps:
- Make sure the issue is not open already.
- Open a new issue.
- Fill in the issue title.
- Fill in the issue description.
- Submit the issue.
Once you are in the correct repository to submit your issue, go to the Issues tab.
Ensure that the issue you are about to file is not already open. If someone has already opened a similar issue, please leave a comment or add a GitHub reaction to the top comment to express your interest. You can also offer help and use the issue to coordinate your efforts in fixing the issue.
If you cannot find an issue that matches the one you are about to file, click the New Issue button on the right.
A new, blank issue should open up.
The issue title should be a brief summary of your issue in one sentence.
If you would like to submit an issue that would include a breaking change, please also refer to our Breaking Changes section below.
The issue description should contain a detailed report of the issue you are submitting. If you are submitting a bug, please include any error messages or stack traces caused by the problem.
Please reference any related issues or pull requests by a pound sign followed by the issue or pull request number (e.g. #11, #72). GitHub will automatically link the number to the corresponding issue or pull request. You can also link to pull requests and issues in other repositories by including the repository owner and name before the issue number. Like this:
<owner name>/<repository name>#<number of PR/issue>So to link to issue #23 in the PowerStigDsc repository which is owned by Microsoft:
Microsoft/PowerStigDsc#23Please also tag any GitHub users you would like to notice this issue. You can tag someone on GitHub with the @ symbol followed by their username.(e.g. @athaynes)
Once you have filled out the issue title and description, click the submit button at the bottom of the issue.
Here's the general process of fixing an issue in PowerStig:
- Pick out the issue you'd like to work on.
- Create a fork of the repository that contains the issue.
- Clone your fork to your machine.
- Create a working branch where you can store your updates to the code.
- Make changes in your working branch to solve the issue.
- Write tests to ensure that the issue is fixed.
- Update the 'Unreleased' section of the module's release notes to include your changes.
- Submit a pull request to the dev branch of the official repository for review.
- Make sure all tests are passing in AppVeyor for your pull request.
- Make sure your code does not contain merge conflicts.
- Address any comments brought up by the reviewer.
Issues that are currently up-for-grabs are tagged with the ```help wantedlabel.
If you find an issue that you want to work on, but it does not have the ```help wantedlabel, make sure to read through the issue and ask if you can start working on it.
A 'fork' on GitHub is your own personal copy of a repository. GitHub's guide to forking a repository is available here. You will need a fork to contribute to any of the repositories in PowerStig since only the maintainers have the ability to push to the official repositories.
Once you have created your fork, you can easily access it via the URL:
https://github.com/<your GitHub username>/<module name>You will want to clone your fork so that you can edit code locally on your machine. GitHub's guide to cloning is available here.
We use a git flow model in our official repositories.
Your fork is your personal territory. You may set it up however best suits your workflow, but we recommend that you set up a working branch separate from the default dev branch. Creating a working branch separate from the default dev branch will allow you to create other working branches off of dev later while your original working branch is still open for code reviews. Limiting your current working branch to a single issue will also both streamline the code review and reduce the possibility of merge conflicts.
The Git guide to branching is available here.
When writing code for any of the modules in PowerStig, please follow PowerStig Style Guidelines and Best Practices. These guidelines are from the PowerShell/DscResources projects and may not always reflect the same PowerShell style as other projects. Code reviewers will expect you to follow these guidelines and may ask you to change your code for consistency.
If you need help committing and pushing your code to your fork, please refer to our guide to getting started with GitHub.
Pay attention to any new code merged into the dev branch of the official repository. If this occurs, you will need to pick-up these changes in your fork using the rebase instructions in our guide to getting started with GitHub.
If you are making a breaking change, please make sure to read the Breaking Changes section below.
All modules in PowerStig should have tests written using Pester included in the Tests folder. You are required to provide adequate test coverage for the code you change.
Please refer to our testing guidelines for information on how to write tests for PowerStig. Our test templates and guidelines are currently under construction. Use them with caution as they may be changed soon.
Tests should currently be structured like so:
- Root folder of module
- Tests
- Unit
- Module.Tests.ps1
- Integration
- Module.Integration.Tests.ps1
- Unit
- Tests
Not all module currently have tests. This does not mean that you do not have to write tests for your changes. If you find that the test file for a module is missing or one of the folders in the structure outlined above is missing, please create it. You don't have to write the full set of tests for the module if you are creating the file. You only need to test the changes that you made to the module.
Release notes for each module are included in the README.md file under the root folder. Currently unreleased changes are listed under the 'Unreleased' section under the 'Versions' header. If this section is missing, please add it.
To update the release notes with your changes, simply add a bullet point (or more) with your changes in the past tense under the 'Unreleased' section. For example:
...
## Versions
### Unreleased
- Added the FriendlyName parameter to ConvertTo-PowerStigXml
### 1.0.0.0
...If you are making a breaking change, please make sure to read the Breaking Changes section below.
A pull request (PR) allows you to submit the changes you made in your fork to the official repository.
To open a pull request, go to the Pull Requests tab of either your fork or the official repository.
Click the New Pull Request button on the right:
The base is the repository and branch the pull request will be merging into.
The target is the repository and branch the pull request will be merging from.
For PowerStig, always create a pull request with the base as the dev branch of the official repository.
The target should be your working branch in your fork.
Once you select the correct base and target, you can review the file and commits that will be included in the pull request by selecting the tabs below the Create Pull Requests Button:
If GitHub tells you that your branches cannot automatically be merged, you probably have merge conflicts. These should be fixed before you submit your pull request.
For help fixing merge conflicts see our guide to getting started with GitHub.
Once you are ready to submit your pull request, click the Create Pull Request button.
The title of your PR should describe the changes it includes in one line. Simply putting the issue number that the PR fixes is not acceptable. If your PR deals with one specific module, please prefix the title with the module name followed by a colon. If your PR fixes an issue please do still include "(Fixes #issue number)" in the title. For example, if a PR fixes issues number 11 and 16 which adds the Ensure parameter, the title should be something like: "Module: Added Ensure parameter (Fixes #11, #16)".
If your pull request includes a breaking change, please refer to the Breaking Changes section below.
If you open a pull request with the wrong title, you can easily edit it by clicking the Edit button to the right of the title in the open pull request.
The description of your PR should include a detailed report of all the changes you made. If your PR fixes an issue please include the number in the description. Please tag anyone you would specifically like to see this PR with the @ symbol followed by their GitHub username (e.g. @athaynes).
Once you are satisfied with the title, description and file changes included, submit the pull request.
If this is your first contribution to PowerStig, you may be asked to sign a Contribution Licensing Agreement (CLA) before your changes can be reviewed:
Once you sign the CLA, the Microsoft CLA bot will automatically update the comment in your PR:
The CLA status check should also pass in your PR.
Once you have signed our CLA, you shouldn't have to do it again. If you believe you have signed our CLA before, but the Microsoft CLA bot still marks your PR as "CLA not signed yet", or the CLA status check does not pass, please sign the CLA again. Sometimes the little bot makes mistakes.
PowerStig uses AppVeyor as a continuous integration (CI) system.
After submitting your pull request, AppVeyor will automatically run a suite of tests on your submitted changes.
Afterwards, AppVeyor will update the status of the pull request, providing at-a-glance feedback about whether your changes are passing tests or not.
All the green checkboxes and red crosses are clickable. They will bring you to the corresponding test page with details on which tests are running and why your tests may be failing.
A maintainer will not merge your pull request if these tests are failing, even if they have nothing to do with your changes. If test failures are occurring that do not relate to the changes you made, you will have to submit another PR with fixes for those failures or wait until someone else does.
Any commit to the working branch that is the target of the pull request will trigger the tests to run again in AppVeyor. If you tag a maintainer, they can also re-run your tests in AppVeyor.
The appveyor.yml file in each module repository describes the build and test sequence provided to AppVeyor.
An AppVeyor badge indicating the latest build status of the master and dev branches at the top of the README.md file of every module repository.
This badge is also clickable. It opens the corresponding module's AppVeyor page which shows test logs and results. From this page you can easily navigate through the build history of the module.
There is a set of common tests for all modules located in the DSCResource.Tests repository.
These tests primarily concentrate on code style, file encoding, correct module schema, and PS Script Analyzer issues. These tests are too good not to use and too complex to duplicate and maintain separately, even if they are geared toward DSC resources. At the end of the day, PowerShell is PowerShell, so only a few of the tests are not applicable to PowerStig.
You should run these tests before submitting a pull request.
The common DSC Resources tests are automatically downloaded into the root module folder when tests are invoked.
If this is not happening for your module, you will need to clone DSCResource.Tests into the root folder of the module that you want to test.
Then simply run Invoke-Pester from the root folder.
Like this:
cd C:\MyPath\ResourceModuleFolder
git clone https://github.com/PowerShell/DscResource.Tests
Invoke-PesterPlease avoid adding the DSCResource.Tests folder to your changes. DSCResource.Tests should be in the .gitignore file so that git will automatically ignore this folder. If DSCResource.Tests is not in the .gitignore file, please add it. If there is no .gitignore file for your module, instructions on how to add one are available in our getting started with GitHub instructions.
The MetaFixers module also in DSCResource.Tests contains a few fix-helper methods such as a function to convert all tab indentations to 4 spaces and a function to fix file encodings.
If you have merge conflicts, please use Git rebasing to fix them instead of Git merging. An introduction to Git rebasing is available in the getting started with GitHub instructions.
Anyone other than you can review your code, but only maintainers can merge your code. If you have a specific contributor/maintainer you want to review your code, be sure to tag them in your pull request.
We don't currently have dedicated maintainers for most modules, so it may take a while for a general maintainer to get around to your pull request. Please be patient.
Breaking changes should first be proposed by opening an issue on the resource and outlining the needed work. This allows the community to discuss the change before the work is done and scopes the breaks to needed areas.
Opening an issue also allows the resource owner or PowerStig Owner (@athaynes) to tag the issue with the breaking change label.
Breaking changes may include:
- Adding a new mandatory parameter
- Changing an existing parameter
- Removing an existing parameter
- Fundamentally changing an existing functionality of a resource
Once a PR is ready with the breaking change please include the following:
- At least one of the bullet points in your addition to the updated release notes starts with 'BREAKING CHANGE:'
- The title of the PR that includes your breaking change starts with 'BREAKING CHANGE:'
One of the easiest ways to contribute to a PowerShell project is to write and edit documentation. All documentation in PowerStig uses GitHub Flavored Markdown (GFM). See the section below for more details.
If you want to contribute new documentation, first check for existing issues to make sure you're not duplicating efforts. If no one seems to be working on what you have planned:
- Open a new issue to tell others about the documentation change/addition you'd like to make.
- Create a fork of the repository you would like the documentation to be added to.
- Edit or add the Markdown file (.md) you would like changed/added. To edit an existing file in the GitHub editor, simply navigate to it in GitHub and click the Edit button.
- When you're ready to contribute your documentation, submit a pull request to the official repository.
If you are looking for a good editor, try:
- The web interface GitHub provides for .md files
- Markdown Pad
- VS Code with the MarkdownLint extension
A great guide to Github Flavored Markdown is available here.
Though only maintainers can merge a pull request, anyone from the community can review a pull request. Maintainers will still take a quick look at code before merging it, but reviews by community members often help pull requests get merged much faster as there are very few maintainers and a lot of pull requests to review.
Pull requests should not be reviewed while tests from AppVeyor are failing. If you are confused why tests in AppVeyor are failing, tag a maintainer or ask the community for help.
All modules in PowerStig should be linked to Reviewable, a code review tool.
Reviewable adds a purple button to the top comment of every pull request.
This button is clickable.
It will take you to a code review of all the changes in that pull request.
If the purple Reviewable button does not appear, you can also go here and paste the URL of the pull request you would like to review into this box towards the bottom of the page:
If a pull request contains a lot of changed files, Reviewable may collapse them and show you only one file at a time. If this happens, you can navigate to other files in the pull request by clicking the purple reviewable icon at the top of the page:
You can make a comment in Reviewable either in the top discussion section (for general/overall comments) or you can click on a line of code to make a comment at that line. Each comment you make will be saved as a draft so that you can continue making comments until you are ready to publish all of them at once. Publishing is discussed in the Publish Review Changes section below. If you want to delete a comment draft at a line of code, click the tiny trash icon at the bottom of the comment.
Some things to pay attention to while reviewing:
- Does the code logic make sense?
- Does the code structure make sense?
- Does this make the resource better?
- Is the code easy to read?
- Do all variables, parameters, and functions have descriptive names? (e.g. no $params, $args, $i, $a, etc.)
- Does every function have a help comment?
- Does the code follow PowerStig Style Guidelines and Best Practices?
- Has the author included test coverage for their changes?
- Has the author updated the Unreleased section of the README with their changes?
When the author replies or makes the changes you requested and you are satisfied with the changes/reply, you will need to resolve the discussion. You can do this in one of two ways:
-
Click the Acknowledge button on the comment
-
Click the small circle in the bottom right of the comment and select 'Satisfied'.
To mark an entire file as reviewed, click the little eye button next to the file name at the top of the file so that it turns green.
Please mark all files and discussions as resolved before you approve the entire pull request.
To approve the pull request, you can click the LGTM (looks good to me) button in the main discussion at the top of the code review in Reviewable:
Or you can simply comment on the pull request on GitHub "Looks good to me" or a thumbs up.
To push your comments and files marked as reviewed to the pull request on GitHub, you will need to publish your changes. This can be done two different ways:
- (RECOMMENDED) Click the large green Publish button at the top of the page:
This will publish all your changes at once and submit them as one comment to the pull request on GitHub. - (NOT RECOMMENDED) Click the small publish button on a comment. This will publish only that one comment as its own separate comment on Github. Please do not publish this way as it will often send a separate email for each comment to whoever is watching the pull request on GitHub. This method also will not publish the files you have marked as reviewed with the little eye button.
