Welcome! This directory contains comprehensive guides for contributing to SecBrain and understanding its various components.
This docs directory contains contributor-focused guides. For core project documentation (architecture, workflows, operations), see secbrain/docs/.
For workflow optimization and analysis guides, see guides/ directory.
| Topic | Guide |
|---|---|
| New to Git? | GIT_QUICK_START.md |
| Git concepts explained | SUMMARY.md |
| Contributing workflow | ../CONTRIBUTING.md |
| CI/CD status | CI_STATUS.md |
| Testing strategies | TESTING-STRATEGIES.md |
| Security patterns | SOLIDITY_SECURITY_PATTERNS.md |
| Troubleshooting | TROUBLESHOOTING.md |
| SBOM & supply chain | SBOM-SECURITY.md |
| Gas optimizations | GAS_OPTIMIZATION_GUIDE.md |
| Gas optimization how-to ⭐ | GAS_OPTIMIZATION_IMPLEMENTATION.md |
| Implementation status | IMPLEMENTATION-STATUS.md |
For detailed workflow and optimization documentation, see guides/:
- Bounty Workflow Analysis - Complete workflow analysis and optimization roadmap
- Workflow Optimization Guide - Optimization features and best practices
- Optimization Guide - Performance and efficiency best practices
- Run Analysis Guidance - Debugging zero-finding runs
- Automation Quick Reference - Daily workflows and tools
- Comprehensive Security Analysis - Security analysis workflow guide
- Verification Guide - How to verify installation and setup
- Free Tier Models - Using free API tiers
- Dependency Management - Managing project dependencies
- TESTING-STRATEGIES.md - Complete guide to property-based testing, fuzzing, and mutation testing
- TESTING-QUICK-REF.md - Quick reference for running tests
- testing-examples/ - Example test files (Echidna, Invariant tests)
- SOLIDITY_SECURITY_PATTERNS.md - Advanced security patterns for smart contracts
- SBOM-SECURITY.md - Software Bill of Materials and supply chain security
- GAS_OPTIMIZATION_GUIDE.md - Comprehensive gas optimization patterns with examples
- GAS_OPTIMIZATION_IMPLEMENTATION.md ⭐ - Step-by-step implementation guide for gas optimizations
- TROUBLESHOOTING.md - Common runtime issues and solutions (spend limits, RPC configuration, etc.)
- SUMMARY.md - Overview of what was fixed and Git concepts
- GIT_QUICK_START.md - Daily Git reference for contributors
- CI_STATUS.md - Current CI pipeline state and known issues
- ../CONTRIBUTING.md - Complete contribution workflow guide
- IMPLEMENTATION-STATUS.md - Summary of major implementations
-
SUMMARY.md - Read this FIRST!
- Friendly explanation of what was fixed
- Git concepts in plain English
- Real-world scenarios
- 9KB, ~20 min read
-
GIT_QUICK_START.md - Your daily reference
- Quick command reference
- Step-by-step workflows
- Common scenarios with solutions
- 7KB, ~15 min read
- 🚀 Emoji-heavy and easy to scan!
- ../CONTRIBUTING.md - The complete guide
- Everything about Git and GitHub
- Detailed workflow explanations
- Merge conflict resolution
- CI/CD workflow
- Common issues and solutions
- 12KB, ~30 min read
- CI_STATUS.md - Current CI state
- Why type checking is non-blocking
- What contributors need to know
- How to fix type errors
- Long-term improvement plan
- 6KB, ~15 min read
1. SUMMARY.md
2. GIT_QUICK_START.md (bookmark this!)
3. Try making a change
4. Refer to CONTRIBUTING.md as needed
1. GIT_QUICK_START.md (refresh basics)
2. CONTRIBUTING.md (sections on PRs and code review)
3. CI_STATUS.md (understand our CI)
1. CONTRIBUTING.md (skim for project-specific details)
2. CI_STATUS.md (understand why mypy is non-blocking)
3. Jump in and contribute!
- What was broken and how it was fixed
- Git concepts explained simply
- Why things work the way they do
- Quick reference card
- Essential Git commands
- Common scenarios (with solutions!)
- Quick contribution workflow
- Best practices
- Complete Git workflow
- How commits, branches, and merges work
- Creating and reviewing PRs
- Dealing with merge conflicts
- CI/CD process
- Troubleshooting guide
- Current CI pipeline
- Type checking status
- What type errors mean
- How to fix type errors
- What contributors need to know
"I want to make my first contribution" → Read GIT_QUICK_START.md and follow the workflow
"I got a merge conflict" → See CONTRIBUTING.md section "Dealing with Merge Conflicts"
"CI is failing on my PR" → Check CI_STATUS.md and the CI logs on GitHub
"I made a mistake with Git" → See GIT_QUICK_START.md section "Oh No! I Messed Up!"
"What is Git/GitHub?" → Start with SUMMARY.md section "Understanding Git & GitHub"
"I accidentally committed to main" → See CONTRIBUTING.md "Common Issues and Solutions"
"SecBrain is giving errors about spend limits or RPC URLs" → See TROUBLESHOOTING.md for common runtime issues
These guides are specific to this project. For general Git learning:
- Interactive Tutorial: https://learngitbranching.js.org/
- Official Docs: https://git-scm.com/doc
- GitHub Guides: https://guides.github.com/
- Cheat Sheet: https://education.github.com/git-cheat-sheet-education.pdf
- Book (free): https://git-scm.com/book/en/v2
| File | Size | Read Time | Best For |
|---|---|---|---|
| SUMMARY.md | 9KB | 20 min | Understanding what was fixed |
| GIT_QUICK_START.md | 7KB | 15 min | Daily Git reference |
| CONTRIBUTING.md | 12KB | 30 min | Complete workflow guide |
| CI_STATUS.md | 6KB | 15 min | CI/CD questions |
Total reading time: ~1.5 hours to read everything Minimum to start: ~20 minutes (SUMMARY + GIT_QUICK_START)
If you're stuck after reading the docs:
- Search the docs - Use Ctrl+F to search these files
- Check GitHub Issues - Someone might have had the same problem
- Ask in a PR - Comment on your pull request
- Open an issue - Create a new issue with the
questionlabel
Remember:
- Everyone struggles with Git at first
- These docs are here to help
- No question is too basic
- The community is friendly
- Practice makes perfect!
Last updated: December 2024 (Current as of December 25, 2024) Questions? Open an issue or ask in your PR!
For core project documentation, see the secbrain/docs/ directory:
| Document | Description |
|---|---|
| Architecture | System design and component overview |
| Workflows | Run modes and phase documentation |
| Operations | Setup, configuration, and usage guide |
| Threat Model | Security considerations and mitigations |
| Automated Agents | Documentation for the automated agent suite |
- Main README - Project overview and quick start (includes GitHub Actions status badges for security, quality, testing, and fuzzing)
- AUTOMATION-QUICK-REF.md - Quick reference for automated agents
- IMPLEMENTATION-STATUS.md - Summary of major implementations