StackStorm/st2

View on GitHub

StackStorm (aka "IFTTT for Ops") is event-driven automation for auto-remediation, incident responses, troubleshooting, deployments, and more for DevOps and SREs. Includes rules engine, workflow, 160 integration packs with 6000+ actions (see https://exchange.stackstorm.org) and ChatOps. Installer at https://docs.stackstorm.com/install/index.html

Stars: 6.5k
Forks: 787
Open beginner issues: 4
Indexed issues: 555

Dominant language: Python
License: Apache-2.0
Last GitHub push: Sep 2, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue help wanted
PR merge metrics: No merged PRs in 30d

Beginner friendly Everything

Open All

555 open issues indexed

yaml.FullLoader used instead of SafeLoader in pack metadata parsing (CWE-502) Open

Difficulty 2/5 1-3 hours Newbie friendliness 86/100

StackStorm/st2#6393 · 1 comment · Opened Jul 20, 2026
Git worktree directories created with chmod 777 (CWE-732) Open

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

StackStorm/st2#6392 · Opened Jul 20, 2026
Predictable temp directory paths in pack management enable symlink attacks (CWE-377) Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackStorm/st2#6391 · Opened Jul 20, 2026
CORS middleware reflects Origin with Allow-Credentials, enabling cross-origin attacks (CWE-346) Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

StackStorm/st2#6390 · Opened Jul 20, 2026
HTTP runner defaults to verify=False, disabling TLS certificate validation (CWE-295) Open

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

StackStorm/st2#6389 · Opened Jul 20, 2026
Jinja2 auto-escape disabled in spec_loader (CWE-79) Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

StackStorm/st2#6388 · Opened Jul 20, 2026
Regular Expression Denial of Service (ReDoS) in check_processes action (CWE-400) Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

StackStorm/st2#6387 · Opened Jul 20, 2026
SSH host key verification disabled in paramiko runner (CWE-295) Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackStorm/st2#6386 · Opened Jul 20, 2026
Command Injection via unsanitized input in subprocess calls (CWE-78) Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

StackStorm/st2#6385 · Opened Jul 20, 2026
[TEN-87733] AMQP Cleartext Authentication — "The remote Advanced Message Queuing Protocol (AMQP) service supports one or more authentication mechanisms that allow credentials to be sent in clear text" Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

StackStorm/st2#6383 · 1 comment · Opened Jul 7, 2026
API key creation allows a non-admin to bind a key to any user and gain that user's privileges (privilege escalation to admin) Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

StackStorm/st2#6380 · Opened Jun 20, 2026
Execution User Impersonation Allows Cross-Account KV Secret Exfiltration (All Versions Including 3.9.0) Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

StackStorm/st2#6379 · Opened Jun 20, 2026
Allow st2-run-pack-tests to emit machine-readable coverage reports and aggregate coverage across packs Open

Difficulty 3/5 1-2 days Newbie friendliness 67/100

StackStorm/st2#6377 · Opened Jun 17, 2026
Action execution fails with KeyError '_cls' when parameters contain '_ref' keys Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

StackStorm/st2#6376 · Opened Apr 17, 2026
stackstorm statsd metrics per action, by action_ref Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

StackStorm/st2#6361 · 2 comments · Opened Nov 12, 2025
Add Timeout Option for st2 pack install Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

StackStorm/st2#6349 · 4 comments · Opened Aug 20, 2025
Signed SSH Certificates Support Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

StackStorm/st2#6346 · Opened Aug 14, 2025
Fix PEM formatting bug when loading private SSH keys in _get_pkey_object Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

StackStorm/st2#6338 · 15 comments · Opened Jul 4, 2025
Keypair API response inconsistency admin vs. non-admin when calling system scoped keys Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

StackStorm/st2#6335 · Opened May 29, 2025
Workflow finishes too early when parallel branches are running Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

StackStorm/st2#6316 · 12 comments · Opened Mar 13, 2025
Multiple Policies to Govern a single Action/Workflow Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

StackStorm/st2#6310 · Opened Mar 5, 2025
How to create custom MongoDB indexes Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

StackStorm/st2#6280 · 3 comments · Opened Nov 18, 2024
Stackstorm UI not masking the secret values Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

StackStorm/st2#6272 · 3 comments · Opened Oct 31, 2024
Ubuntu 24.04 LTS support? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackStorm/st2#6243 · 5 comments · 5 reactions · Opened Sep 16, 2024
workflow doesn't go ahead next item in case of concurrency: 1 Open

bug status:to be verified

Difficulty 4/5 3-5 days Newbie friendliness 50/100

StackStorm/st2#6234 · 2 comments · Opened Sep 4, 2024
Installation of Stackstorm v3.8 Open

Difficulty 3/5 1-2 days Newbie friendliness 20/100

StackStorm/st2#6233 · 8 comments · Opened Sep 3, 2024
Workflows stuck in delayed queue since hours/days and never gets executed Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

StackStorm/st2#6230 · 14 comments · Opened Aug 31, 2024
Ability to add a bearer token for authorization for st2client Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

StackStorm/st2#6221 · 1 comment · Opened Jul 13, 2024
Manually delete or cancel inquiries Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

StackStorm/st2#6216 · 1 comment · Opened Jun 26, 2024
Inquiries with invalid schema go to blank page Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

StackStorm/st2#6215 · 1 comment · Opened Jun 26, 2024
core.ask not working with join? Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

StackStorm/st2#6213 · Opened Jun 16, 2024
Assign action to specific worker Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackStorm/st2#6212 · 5 comments · Opened Jun 3, 2024
Fix unit tests to not require the `stanley` system_user? Open

bug infrastructure: ci/cd proposal tests

Difficulty 4/5 3-5 days Newbie friendliness 35/100

StackStorm/st2#6203 · 1 comment · Opened May 24, 2024
Pack rule operator exists / nexists should not have criteria pattern mandatory Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

StackStorm/st2#6197 · Opened May 11, 2024
Application compatibility with RHEL8 Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

StackStorm/st2#6196 · 7 comments · Opened May 9, 2024
Environment variables from file in Actions Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

StackStorm/st2#6178 · 3 comments · 1 reaction · Opened Apr 5, 2024
Timeout support for Orquesta tasks Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackStorm/st2#6177 · 2 comments · 1 reaction · Opened Apr 5, 2024
many zombie processes forked by st2actionrunner Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

StackStorm/st2#6173 · 5 comments · Opened Mar 27, 2024
old pytz version Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

StackStorm/st2#6167 · Opened Mar 17, 2024
Provide support for passing "=" in a string Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

StackStorm/st2#6160 · Opened Mar 4, 2024
st2kv : Non-hexadecimal digit found Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

StackStorm/st2#6148 · Opened Feb 21, 2024
Organisation fo ST2 Open

breaking change feature

Difficulty 5/5 Over a week Newbie friendliness 20/100

StackStorm/st2#6147 · 4 comments · 1 reaction · Opened Feb 21, 2024
Custom Scopes for Key-Value Store + RBAC for that Scopes Open

feature

Difficulty 5/5 Over a week Newbie friendliness 20/100

StackStorm/st2#6146 · 1 comment · Opened Feb 21, 2024
Eventlet retirement Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

StackStorm/st2#6128 · 14 comments · Opened Feb 7, 2024
Disable Rule show value of Secret Action Field Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

StackStorm/st2#6125 · Opened Feb 6, 2024
No such file or directory: '/home/stanley/.ssh/stanley_rsa Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

StackStorm/st2#6116 · 6 comments · 1 reaction · Opened Jan 22, 2024
Command Error: st2-run-pack-tests -c Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

StackStorm/st2#6109 · 1 comment · Opened Jan 11, 2024
Stackstorm compatibility with latest versions of Mongo Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

StackStorm/st2#6106 · 6 comments · Opened Jan 4, 2024
ActionRunners get stuck when there is transient connection loss to RabbitMQ/ Zookeeper Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

StackStorm/st2#6097 · 1 comment · Opened Dec 14, 2023
Installation Issue - TCP Ports and MongoDB Storage Requirements Open

Difficulty 4/5 3-5 days Newbie friendliness 18/100

StackStorm/st2#6095 · 3 comments · Opened Dec 13, 2023

StackStorm/st2

Get new issues in your inbox