kubestellar/console-marketplace

[ci-maintainer] PR Verifier rejects scanner/agent PR titles — [actor] prefix not valid conventional commits about 10 hours ago

help wanted ci

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] console-marketplace: scorecard.yml passes secrets:inherit to mutable @main reusable workflow with id-token:write about 14 hours ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] console-marketplace: marketplace-auto-qa.yml job-level write permissions flagged by Scorecard about 14 hours ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] copilot-dco.yml missing permissions block — GITHUB_TOKEN inherits repo-wide defaults about 15 hours ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] pull_request_target workflows (greetings.yml, pr-verifier.yml) call mutable reusable workflows @main about 15 hours ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] pull_request_target ai-fix.yml calls mutable reusable workflow @main — pwn-request risk about 15 hours ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[ci-maintainer] PR Verifier workflow startup failure on all PRs — missing reusable workflow about 16 hours ago

help wanted ci

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] No branch protection and no code review on main — marketplace catalog at risk of unauthorized modification 5 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] TokenPermissions: 4 workflows lack top-level read-all permissions (Scorecard HIGH) 6 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] TokenPermissions: pr-verifier.yml lacks top-level read-all permissions (Scorecard HIGH) 6 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[quality] Vitest configuration lacks coverage instrumentation and reporting 8 days ago

help wanted quality testing

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] 6 reusable workflow refs still at @main after partial remediation (supply-chain risk) 8 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[quality] Most card component subdirectories lack unit tests 8 days ago

help wanted quality testing

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] ai-fix.yml / copilot-automation.yml / greetings.yml use unpinned @main reusable workflow ref (supply-chain risk) 8 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] copilot-dco.yml: no top-level permissions + @main reusable ref 8 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] greetings.yml: top-level issues/pull-requests write not minimized 8 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] Token-Permissions: ai-fix.yml and copilot-automation.yml use top-level write permissions with pull_request_target 9 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] copilot-automation.yml + ai-fix.yml: pull_request_target with top-level write permissions, no fork guards 9 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] pr-verifier.yml calls non-existent reusable-pr-verifier.yml — PR title check disabled 9 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] greetings.yml pull_request_target missing fork guard — pwn-request risk 9 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[Auto-QA] Registry Staleness: 0 error(s), 1 warning(s) 9 days ago

enhancement help wanted triage/accepted auto-qa auto-qa:registry ai-fix-requested ai-processing

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[Auto-QA] Download URL Validation: 2 error(s), 0 warning(s) 9 days ago

bug help wanted triage/accepted auto-qa auto-qa:registry ai-fix-requested ai-processing

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] Scorecard Code-Review score 0/10 — unreviewed commits merged 12 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] No branch protection on default branch 12 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] No branch protection on default branch (Scorecard BranchProtectionID high) 12 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] pull_request_target workflows grant write permissions without trust gate 13 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[quality] Hooks and utility libraries have no unit tests 13 days ago

help wanted quality testing

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] Code-Review score 0 — 0/22 recent changesets had an approved review (Scorecard high) 13 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[quality] Card component rendering logic has zero test coverage across 6 card directories 13 days ago

help wanted quality testing

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] Token-Permissions: job-level write scopes in copilot-automation.yml, ai-fix.yml, marketplace-auto-qa.yml (Scorecard high) 13 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] top-level GITHUB_TOKEN write permissions in scorecard.yml and pr-verifier.yml 13 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] 17 CodeQL js/unused-local-variable alerts in card components 13 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[quality] 4 marketplace card demoData files lack shape/contract tests 13 days ago

help wanted quality testing

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] CodeQL: superfluous arguments passed to card hooks and unused variables (9 alerts) 13 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] over-permissive GITHUB_TOKEN in 5+ workflows (copilot-automation, ai-fix, marketplace-auto-qa, scorecard) 14 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] Missing permissions block in copilot-dco.yml (not propagated from console fix) 15 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] pr-verifier.yml: pull_request_target + secrets: inherit exposes all repo secrets 16 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] greetings.yml: pull_request_target + secrets: inherit exposes all repo secrets 16 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[Auto-QA] Registry Staleness: 0 error(s), 1 warning(s) 17 days ago

enhancement help wanted triage/accepted auto-qa auto-qa:registry ai-fix-requested ai-processing

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] copilot-automation.yml: pull_request_target with 4 write permissions and no fork guard (re-filed) 20 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] ai-fix.yml: pull_request_target with 3 write permissions and no fork guard (re-filed) 20 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] ai-fix.yml: pull_request_target with write permissions and no fork guard 20 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] 10 workflows use kubestellar/infra reusable workflows at @main (mutable ref) 20 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] copilot-automation.yml: pull_request_target with write permissions and no fork guard 20 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[ci-maintainer] PR Verifier fails with GHCR unauthorized + missing fork guard 22 days ago

help wanted ci

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] console-marketplace: main branch has no protection rules — direct pushes and force-pushes allowed 27 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] Dependabot security updates disabled — automated CVE patches not applied 27 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] HIGH: Code-Review score 1/10 — only 5 of 26 recent changesets reviewed (Scorecard #11) 28 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[quality] Add actionlint CI workflow to validate GitHub Actions YAML 28 days ago

help wanted quality testing

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[quality] Add actionlint CI workflow to validate GitHub Actions YAML 28 days ago

help wanted quality testing

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[quality] Add test-existence gate for new marketplace card components 28 days ago

help wanted quality testing

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] HIGH: Over-permissive GITHUB_TOKEN in 6 workflows (Scorecard #7, #21, #38-42) 29 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[scanner] 4 security PRs blocked by DCO + approval requirements 29 days ago

help wanted

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[quality] add unit tests for _is_safe_download_url SSRF guard 29 days ago

help wanted quality testing

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[quality] 9 UI components lack unit tests (card index.tsx + shared UI) 29 days ago

help wanted quality testing

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] MEDIUM: unpinned @main workflow ref in ai-fix.yml (supply chain risk) 30 days ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[guide] console-marketplace missing CODE_OF_CONDUCT.md 30 days ago

documentation help wanted

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] marketplace-auto-qa.yml grants write permissions at workflow level (Scorecard TokenPermissions) about 1 month ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] SSRF via unvalidated downloadUrl in validate-marketplace.py check_download_urls() about 1 month ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] console-marketplace: ai-fix.yml and copilot-automation.yml use pull_request_target without fork guard (CI poisoning risk) about 1 month ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] pull_request_target + write permissions + floating @main ref in copilot-automation workflow about 1 month ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] Secret scanning disabled — no automated detection for leaked credentials about 1 month ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] Unpinned GitHub Actions and missing permissions in ts-unit-tests.yml about 1 month ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] LOW: Code-Review not enforced + no Dependency-Update-Tool configured (Scorecard HIGH) about 1 month ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] LOW: Branch protection not enforced on main branch (Scorecard HIGH) about 1 month ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[scanner] registry.json: downloadUrl values point to mutable main branch refs about 1 month ago

bug help wanted

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[scanner] ts-unit-tests.yml: third-party actions not pinned to commit SHAs about 1 month ago

bug help wanted

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] Over-permissive GITHUB_TOKEN in 11 workflows + missing branch protection about 1 month ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

Add SECURITY.md — no vulnerability disclosure policy for marketplace about 1 month ago

documentation help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[guide] missing bug report and feature request issue templates — only dashboard submission template exists about 1 month ago

documentation help wanted

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[quality] coverage gap: React hooks in console-marketplace lack unit tests (useMCP, useGlobalFilters, useOpenKruiseStatus) about 1 month ago

help wanted quality testing

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[guide] CONTRIBUTING.md missing the Python-based marketplace validator in local validation steps about 1 month ago

documentation help wanted

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[quality] CoreDNS demoData.ts missing unit test about 1 month ago

help wanted auto-qa:card-quality

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[guide] CONTRIBUTING.md missing instructions for testing dashboards, presets, and themes locally before submitting about 1 month ago

documentation help wanted

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[sec-check] Supply chain risk: unpinned @main reusable workflow refs with pull_request_target + secrets:inherit about 1 month ago

help wanted security

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

[Auto-QA] Card Type Existence: 2 error(s), 0 warning(s) about 2 months ago

bug help wanted triage/accepted auto-qa auto-qa:card-quality ai-fix-requested ai-processing

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement SPIRE monitoring card 2 months ago

help wanted cncf-card difficulty/intermediate hold

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement KubeVela monitoring card 2 months ago

help wanted cncf-card difficulty/intermediate hold

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement Longhorn monitoring card 2 months ago

help wanted cncf-card difficulty/intermediate hold

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement OpenFGA monitoring card 2 months ago

help wanted cncf-card difficulty/intermediate hold

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement Strimzi monitoring card 2 months ago

help wanted cncf-card difficulty/intermediate hold

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement Volcano monitoring card 2 months ago

help wanted cncf-card difficulty/intermediate hold

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement wasmCloud monitoring card 2 months ago

good first issue help wanted cncf-card difficulty/beginner hold

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement Flatcar Container Linux monitoring card 2 months ago

help wanted cncf-card difficulty/advanced hold

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement Chaos Mesh monitoring card 2 months ago

help wanted cncf-card difficulty/intermediate

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement OpenFeature monitoring card 3 months ago

good first issue help wanted cncf-card difficulty/beginner

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement Backstage monitoring card 3 months ago

help wanted cncf-card difficulty/intermediate

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement Linkerd monitoring card 3 months ago

help wanted cncf-card difficulty/intermediate

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement Contour monitoring card 3 months ago

good first issue help wanted cncf-card difficulty/beginner

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement Harbor Registry monitoring card 3 months ago

help wanted cncf-card difficulty/intermediate

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement Jaeger Tracing monitoring card 3 months ago

help wanted cncf-card difficulty/intermediate

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement KServe monitoring card 3 months ago

help wanted cncf-card difficulty/intermediate

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement CubeFS monitoring card 3 months ago

help wanted cncf-card difficulty/advanced

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement Flux CD monitoring card 3 months ago

help wanted cncf-card difficulty/intermediate

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement Fluid monitoring card 3 months ago

help wanted cncf-card difficulty/intermediate

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement Cilium monitoring card 3 months ago

help wanted cncf-card difficulty/intermediate

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement Knative monitoring card 3 months ago

help wanted cncf-card difficulty/intermediate

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement Lima monitoring card 3 months ago

good first issue help wanted cncf-card difficulty/beginner

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement Thanos monitoring card 3 months ago

help wanted cncf-card difficulty/intermediate

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

card: Implement Artifact Hub monitoring card 3 months ago

good first issue help wanted cncf-card difficulty/beginner

kubestellar/console-marketplace

1

Community marketplace for KubeStellar Console dashboards, card presets, and themes

TypeScript

Open Issues Need Help