Live good-first-issue & help-wanted feed

Find meaningful ways to contribute

Browse open GitHub issues that maintainers labeled for help. Filter by language, stars, category, and difficulty — then pick something you can finish.

Projects
120,948
Open issues
840,940
Cost
Free
Illustration of a Good first issue card with GitHub, plus Learn new skills, Work on real projects, Make an impact, and Open source is for everyone

Active projects

Unique repos with open help-wanted issues updated in the last 30 days

Showing 30 of ~22,907 matching filters (10+ stars)

List

support other protocols from matterbridge

AI summary

The user is inquiring about plans to expand the protocol support in matterircd, noting that Matterbridge supports many more protocols. They are asking what would be required to add these protocols and express dissatisfaction with existing solutions for certain platforms.

enhancementhelp wanted
307
Difficulty
4/5

[scanner] Single authoritative hive:status writer: serialise, compare-and-retry, reconcile duplicate status comments

AI summary

This issue addresses race conditions in how GitHub status comments are updated and created by multiple writers. It proposes a single, authoritative writer function that serializes writes per repository, uses a compare-and-retry mechanism to handle concurrent edits, and includes reconciliation for duplicate comment creations. This is crucial to prevent lost updates and duplicate status comments, especially before implementing issue-side consolidation.

help wantedagent/scannerhive/claimed-by-scannerstage/020-claimed
51
Difficulty
4/5

Offline verification from a signed bundle

AI summary

This issue proposes enabling offline verification of signed bundles by leveraging the inclusion proof already present within the bundle. The goal is to allow a verifier to confirm a signature's existence in the transparency log without needing to connect to the public Rekor log, thus improving verification speed and reliability.

help wantedDesign
11
Difficulty
3/5

🛠 Tooling: update astro to v7

AI summary

This issue proposes updating the Astro build tool from version 5 to version 7. The reporter has confirmed they've taken standard troubleshooting steps and searched for existing issues. This is a straightforward dependency update task.

status: accepting prsgood first issuearea: tooling
164
Difficulty
2/5

🐝 Hive Advisory Report

AI summary

This issue serves as a central hub for advisory findings from Hive agents, particularly at lower ACMM levels where agents analyze code without creating direct issues or PRs. A governor agent periodically posts digest comments summarizing these advisory findings. This issue is intended to be a living document and should not be closed.

help wantedagent/scannerhive/advisoryagent/security
119
Difficulty
2/5

Support a custom Rekor URL

AI summary

This issue proposes adding support for custom Rekor URLs in the Anchor tool. Currently, the tool only supports the public Rekor instance, preventing teams with private Sigstore deployments from using it. The proposed solution involves adding a `--rekor-url` flag and a corresponding environment variable to allow users to specify their own Rekor instance.

help wanted
11
Difficulty
2/5

Prune or compact the local `log-index.json`

AI summary

The local `log-index.json` file grows indefinitely, impacting performance as it's read on every lookup. This issue proposes implementing a strategy to bound the size of this file, such as retaining recent revisions and identity rotations, or compacting older data, without compromising the integrity of historical chain verification.

help wanted
11
Difficulty
3/5

Add shared Console screenshots to Getting Started using fred

AI summary

This issue requests updating the "Getting Started" documentation with consistent and platform-agnostic Console screenshots. The goal is to replace installation-specific images with generic ones, ensuring clarity across different deployment environments like k3d, Kubernetes, and Amazon EKS. The update involves auditing all Console sections, capturing specific workflow steps, and reusing shared screenshot snippets.

good first issue
449
Difficulty
3/5

Review the README quick start on a clean machine

AI summary

This issue requests a review of the README's quick start guide on a clean environment to identify any unclear steps, missing prerequisites, or incorrect command usage. The goal is to ensure a smooth onboarding experience for new users by fixing any issues found before the signing steps.

good first issue
11
Difficulty
2/5

Migration to new codebase

AI summary

This issue announces a significant codebase migration for the niri project, merging a large refactoring effort. While aiming for parity, users are encouraged to report any breaking changes encountered in their configurations, with specific examples provided for hot corners and color/gradient styling.

help wantedannouncement
115
Difficulty
3/5

Add CI, `CONTRIBUTING.md` and `SECURITY.md`

AI summary

This issue proposes adding essential development infrastructure to the Anchor repository. It requires implementing a GitHub Actions CI workflow for Go code, creating a CONTRIBUTING.md file to guide developers, and a SECURITY.md file for vulnerability reporting. The goal is to improve code quality, developer onboarding, and security practices.

documentationgood first issue
11
Difficulty
3/5
vimeo/psalm

The result of __toString is mistakenly assumed to be always lower-cased

AI summary

This issue reports a false positive in Psalm's type reconciliation. Psalm incorrectly assumes that the output of a `__toString` method will always be lower-cased, leading to an unnecessary `strtolower` call being flagged as redundant. The fix involves correcting Psalm's understanding of `__toString` return types.

bugtype reconciliationHelp wanted
5.9K
Difficulty
2/5

Add tests for `internal/diff` and `internal/predicate`

AI summary

This issue requests the addition of comprehensive unit tests for the `internal/diff` and `internal/predicate` Go packages. The tests should cover various scenarios for schema comparison and in-toto predicate generation, ensuring the packages function correctly and handle edge cases.

good first issuetesting
11
Difficulty
2/5
glsec/glsec

Add parser.Bool for YAML 1.1 booleans and use it in GL049 (interruptible) and GL008 (allow_failure)

AI summary

This issue proposes adding a new `Bool` parser function to handle YAML 1.1 boolean values like 'yes', 'no', 'on', and 'off' (case-insensitive) which are not correctly interpreted by the current YAML parser. This fix is needed to accurately detect findings in GitLab CI configurations for `interruptible` and `allow_failure` keywords.

buggood first issuecoreP3
22
Difficulty
2/5

Add tests for `internal/canon` (RFC 8785 vectors)

AI summary

This issue proposes adding comprehensive tests for the `internal/canon` package, which is responsible for schema canonicalization and hashing according to RFC 8785. The goal is to ensure that equivalent schemas produce the same hash and different schemas produce different hashes, which is critical for the integrity of the Anchor system. The tests should cover RFC 8785 examples and specific cases relevant to tool schemas.

good first issuetesting
11
Difficulty
3/5
glsec/glsec

withoutSudo: handle combined flags (-Hu), long options (--user) and doas

AI summary

This issue aims to improve the `withoutSudo` function by enabling it to correctly parse various `sudo` and `doas` command-line arguments. The current implementation incorrectly identifies the command to be executed when combined flags, long options, or specific `doas` arguments are used, leading to potential security rule misinterpretations. The goal is to extend the parsing logic to handle these cases accurately.

buggood first issuecoreP3
22
Difficulty
3/5
glsec/glsec

GL013: isProdEnv matches prod/live as substrings (non-prod, products-review, delivery are treated as production)

AI summary

The `isProdEnv` function incorrectly identifies environments as production-like if their names contain substrings like 'prod' or 'live'. This leads to false positives for environments like 'non-prod' or 'products-review'. The proposed fix involves implementing word-based matching and excluding 'non-' prefixes for 'prod' and 'production' to accurately classify production environments.

buggood first issueruleP3
22
Difficulty
3/5

Proper icons

AI summary

This issue requests that all in-game icons be updated to match the style of the base game. It provides examples of existing icons for worldwide rooms, personal rooms, time trials, and race courses, along with screenshots of where these icons are used. The goal is to ensure visual consistency across the game's interface.

help wanted
47
Difficulty
2/5

[reviewer] Review backlog (correctness): Journal.Get no longer blocks to refresh when a peer process holds the flock

AI summary

This issue highlights a change in the `Journal.Get` function where it no longer blocks to refresh data when a peer process holds a flock. Instead, it now falls back to the last committed snapshot, potentially leading to stale data for callers relying on immediate cross-process freshness. The change is documented as intended, but the issue asks to confirm if any callers require the old blocking behavior.

help wantedagent/reviewerstage/010-actionable
51
Difficulty
3/5

Add option for hardware buttons to skip chapters

AI summary

This feature request proposes adding an option to assign hardware buttons (like those on headphones) to skip forward or backward through podcast chapters. This would provide a more convenient way to bypass unwanted sections like ads, without needing to manually interact with the app. The suggestion includes a fallback mechanism to fast forward/rewind if a podcast doesn't have chapter markers.

Type: Feature requestGood first issueFunctionality: Chapters
8.0K
Difficulty
2/5
apache/burr

Builder: node types with specific implementations

AI summary

This issue proposes adding concrete implementations for various node types in the visual builder. Currently, these nodes are primarily visual/metadata and need to be backed by functional code to generate usable Burr actions, covering LLM calls, API calls, inline code execution, streaming, and control flow logic.

help wanted
2.5K
Difficulty
4/5
apache/burr

Release process automation and maturity

AI summary

This issue aims to significantly automate and mature the project's release process. It identifies several manual steps and gaps in current tooling, proposing solutions for RC promotion, release branches, backports, reproducible builds, and release notes generation to make the process more reliable and less error-prone.

help wantedkind/umbrellaarea/cipriority/high
2.5K
Difficulty
4/5

Simple span/log processors don't wait for in-flight exports on ForceFlush/Shutdown

AI summary

The current implementation of simple span and log processors in OpenTelemetry does not properly handle in-flight exports during shutdown or force flush operations. This can lead to data loss as exports might be sent to an already shut-down exporter. The proposed fix involves tracking active export jobs, ensuring they complete before shutdown, and adding timeouts to prevent indefinite blocking.

good first issuehelp wanted
134
Difficulty
3/5

traceparent decode rejects future-version headers via uppercase char check

AI summary

The current implementation of the TraceParent header decoder rejects entire headers if they contain any uppercase characters, even in future, unknown fields. This behavior contradicts the W3C Trace Context specification, which states that unknown fields should not be parsed or assumed. The proposed fix is to remove the blanket uppercase rejection and ensure only known fields are validated for lowercase hex.

good first issuehelp wanted
134
Difficulty
2/5

Investigation API: GET /v1/vehicle-anomaly-episodes/{episode_id} (E25)

AI summary

This issue proposes adding a new API endpoint, GET /v1/vehicle-anomaly-episodes/{episode_id}, to retrieve detailed information about a specific vehicle anomaly episode. The endpoint will provide data such as the anomaly type, vehicle ID, timestamps for opening and closing, duration, and the reason for closure, supporting use cases for investigating vehicle issues.

enhancementhelp wanted
23
Difficulty
2/5

Investigation API: GET /v1/vehicle-anomaly-episodes (E24)

AI summary

This issue proposes adding a new API endpoint, GET /v1/vehicle-anomaly-episodes, to retrieve detailed information about vehicle anomalies. This will allow operators to investigate specific issues like stale timestamps or implausible positions, which are not visible in aggregate metrics. The endpoint will support various filtering parameters to narrow down the search.

enhancementhelp wanted
23
Difficulty
3/5

How it works

Three steps from browsing to opening a PR.

Read the beginner guide →
  1. 1

    Filter the feed

    Pick a language, minimum stars, category, and difficulty that match what you can ship.

  2. 2

    Read the AI summary

    Each card includes a short summary and difficulty score when we have one — so you can skip the wall of text.

  3. 3

    Open the issue

    Jump to GitHub, talk to the maintainer if needed, and contribute where help is actually wanted.

Not finding what you’re looking for?

Browse 120,948 projects or reset filters to see more of the 840,940 indexed issues.