contribute/contribute.md
We value contributions from the Portainer community and encourage developers to propose fixes, improvements, and new ideas.
The following guidelines outline our engineering workflows, please review these before making a contribution to ensure any changes can be integrated smoothly.
{% hint style="warning" %}
If you use any form of AI assistance to create your contribution - whether for code, documentation, or drafting pull request (PR) responses - it must be disclosed in your pull request description.
Trivial assistance, like single-word auto-completion, does not require disclosure. Disclosing AI usage helps maintainers apply the correct level of scrutiny during review.
For commits where an AI tool has significantly contributed to the code, it is recommended to add a Co-Authored-By trailer in the commit message to formally credit the tool, using the format specified by the tool's provider. {% endhint %}
The Portainer CE codebase is available in GitHub. Please follow our build instructions and the following guidelines when making a contribution.
develop and release/* branches in public repositories are read-only: merges into these branches are blocked to preserve synchronization with our internal repositories.community branch in each public repository to accept and review external contributions.develop branch (not main, release/*, or community). This ensures you are working off the latest version of the codebase.develop branch.community when the contribution is ready to be merged.community, Portainer engineers will cherry-pick contributions into the upstream private repository.develop and subsequent releases through our normal sync process.If you find a bug, please tell us so we can triage it. All bugs are managed in the GitHub issues repo. When you click through, our template makes it easy to record all of the details. Check the list of open bugs before reporting to avoid duplicates.
This article covers how we prioritize bug fixes.
The Portainer team takes the security of our products seriously. If you believe you have discovered a security vulnerability in any Portainer-owned repository, please report it responsibly.
Plase do not report security vulnerabilities through public channels, including standard GitHub issues.
Instead, report vulnerabilities using one of the following methods:
These channels allow the team to review and address the issue as quickly as possible while minimizing the risk of public exposure before a fix is available.
You can request new features by posting an Idea in our GitHub Discussions forum. Please check to see if someone has already requested the feature you want, and give it an upvote if so.
Learn how we prioritize feature development in this article.