Thanks for improving NetSweep.
- Read security.md — only test on authorized systems.
- Open an issue for large changes when possible.
- Use the issue templates.
git clone https://github.com/sondt99/NetSweep.git
cd NetSweep
python3 -m venv .venv && source .venv/bin/activate
pip install -e ".[dev]"
pytest tests/ -q- Put new logic under
netsweep/only (run.pystays a thin launcher). - Respect layering:
cli→scan→net/config/policy/data. - Prefer type hints and small, testable functions.
- Do not reintroduce shell=True for user-controlled data.
- Redact secrets in logs/exports.
- Keep default security limits enforced.
Use the PR template checklist:
- Tests added/updated
-
pytest tests/ -qpasses - CHANGELOG updated for user-visible changes
- No secrets or scan artifacts committed
- Linked issue (
Fixes #…)
- Patch: bugfixes
- Minor (e.g. 5.1 → 5.2): features, non-breaking package changes
- Major (6.0): public API freezes / remotions as needed
Do not file public exploit details for unfixed issues. Use SECURITY.md.
By contributing, you agree that your contributions are licensed under the MIT License covering this project.