chainguard-dev/melange

View on GitHub

build APKs from source code

Stars: 628
Forks: 179
Open beginner issues: 0
Indexed issues: 169
Avg merge: 14h 55m
Merged PRs (30d): 15

Dominant language: Go
License: Apache-2.0
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 20, 2026
Contributing guide: No contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

169 open issues indexed

fetch pipeline without extract cannot use `expected-sha256`? Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

chainguard-dev/melange#2633 · Opened Aug 28, 2026
Guidance request: how to handle build-time secrets without leaking them into the APK Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

chainguard-dev/melange#2624 · Opened Aug 17, 2026
proposal: add a `${{package.date}}` substitution for build pipeline Open

Difficulty 5/5 Over a week Newbie friendliness 38/100

chainguard-dev/melange#2614 · Opened Aug 7, 2026
How to create a package only containing files (i.e. no binaries etc.) using the fetch pipeline? Open

Difficulty 3/5 1-2 days Newbie friendliness 52/100

chainguard-dev/melange#2592 · 5 comments · Opened Jul 10, 2026
proposal: support offline builds Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

chainguard-dev/melange#2559 · Opened Jun 5, 2026
ELF notes not applied w/ QEMU runner when using `lld` Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

chainguard-dev/melange#2550 · Opened May 29, 2026
Feature Request: "build --name deps" Open

Difficulty 3/5 1-2 days Newbie friendliness 62/100

chainguard-dev/melange#2494 · Opened Apr 20, 2026
Unable to use persistent workspace Open

Difficulty 3/5 1-2 days Newbie friendliness 52/100

chainguard-dev/melange#2484 · Opened Apr 14, 2026
We should have target-archtiecutre for subpackages Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

chainguard-dev/melange#2444 · 1 comment · 1 reaction · Opened Mar 26, 2026
Appended epoch uses the wrong separator for semver Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

chainguard-dev/melange#2437 · 1 comment · Opened Mar 25, 2026
Example fails to build Open

Difficulty 3/5 1-2 days Newbie friendliness 42/100

chainguard-dev/melange#2329 · Opened Feb 5, 2026
We should document and sync the various environment variables we use with the command line flags. Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

chainguard-dev/melange#2212 · Opened Nov 3, 2025
during testing melange doesn't install ${{package.full-version}} Open

bug eng:os

Difficulty 3/5 1-2 days Newbie friendliness 35/100

chainguard-dev/melange#2194 · Opened Oct 21, 2025
Cache/use source tarballs when safe Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

chainguard-dev/melange#2188 · 1 comment · Opened Oct 17, 2025
CDN for schema.json to enable autocompletion in YAML server Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

chainguard-dev/melange#2162 · Opened Sep 29, 2025
Melange should add fully resolved test packages to the embeded file if possible Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

chainguard-dev/melange#2161 · Opened Sep 25, 2025
Resolving wrong dependency for Alpine build Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

chainguard-dev/melange#2137 · Opened Aug 21, 2025
Remove `ca-certificates-bundle` from `go/install` Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

chainguard-dev/melange#2125 · Opened Aug 18, 2025
Packages built on MacOS with docker runner are dropping permission/executable bits Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

chainguard-dev/melange#2103 · Opened Jul 27, 2025
melange does not allow symlinks to files in workspaces Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

chainguard-dev/melange#2082 · Opened Jul 15, 2025
Melange 0.28.0: pinned repository `--repository-add` doesn't get picked up with `test` Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

chainguard-dev/melange#2066 · Opened Jul 3, 2025
QEMU: Files shipped by packages in `/run` are not present in test VMs Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

chainguard-dev/melange#2060 · 2 comments · Opened Jun 30, 2025
Why aren't signed commits required on this project? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

chainguard-dev/melange#2055 · Opened Jun 26, 2025
Weird race condition with /home/build at startup w/ QEMU runner Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

chainguard-dev/melange#2045 · 4 comments · Opened Jun 13, 2025
Default substitutions in environment Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

chainguard-dev/melange#1958 · Opened May 1, 2025
PATH set in environment.environment is not honored Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

chainguard-dev/melange#1956 · Opened May 1, 2025
Please add a CONTRIBUTION.md Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

chainguard-dev/melange#1930 · Opened Apr 18, 2025
Interface for passing credentials into builds Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

chainguard-dev/melange#1924 · 1 reaction · Opened Apr 16, 2025
[BUG] Melange fails to saving OCI image locally when using docker runner on MacOS Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

chainguard-dev/melange#1908 · 5 comments · Opened Apr 10, 2025
fetch: store download in `${{targets.contextdir}}` instead Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

chainguard-dev/melange#1899 · 2 comments · Opened Apr 8, 2025
Failed to set capabilities on file 'setcap': Operation not supported Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

chainguard-dev/melange#1876 · 2 comments · Opened Mar 27, 2025
Support additional experiments when doing golang SCA runtime deps Open

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

chainguard-dev/melange#1837 · Opened Mar 6, 2025
Trigger the release workflow automatically when creating a tag or release Open

Difficulty 3/5 1-2 days Newbie friendliness 38/100

chainguard-dev/melange#1825 · Opened Feb 28, 2025
Feature: allow pipelines to modify environment.environment Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

chainguard-dev/melange#1823 · Opened Feb 27, 2025
test/quality: add new pipeline Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

chainguard-dev/melange#1818 · Opened Feb 27, 2025
go/tidy: create new pipeline that upgrades go.mod Open

chainguard-dev/melange#1817 · 1 comment · 3 assignees · Opened Feb 27, 2025
compatibility with Chimera Linux? Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

chainguard-dev/melange#1816 · 1 comment · Opened Feb 27, 2025
Provide a spec for the YAML we use Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

chainguard-dev/melange#1803 · 2 comments · 2 reactions · Opened Feb 20, 2025
Melange should create the subpkgdirs Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

chainguard-dev/melange#1800 · Opened Feb 20, 2025
ERRO failed to build package: unable to build guest: unable to lock image configuration: unable to lock packages to a consistent version: Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

chainguard-dev/melange#1780 · Opened Feb 11, 2025
melange considers packages which provide an absolute symlink as providing the target Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

chainguard-dev/melange#1775 · 2 comments · Opened Feb 4, 2025
`var-transforms` do not provide a mechanism for mutating dissimilar inputs to the same variable Open

Difficulty 3/5 1-2 days Newbie friendliness 38/100

chainguard-dev/melange#1774 · 1 comment · 2 reactions · Opened Feb 4, 2025
Melange generated spec files should be traceable Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

chainguard-dev/melange#1752 · 1 reaction · Opened Jan 16, 2025
Immutable write-once location in the builder Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

chainguard-dev/melange#1750 · 1 comment · Opened Jan 14, 2025
Installing runtime dependencies during build Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

chainguard-dev/melange#1724 · 1 comment · Opened Dec 23, 2024
The default for packages without tests should be to create an image to make sure the package can be installed. Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

chainguard-dev/melange#1690 · Opened Dec 10, 2024
Calling action with latest version fails as there is no binary for different archs Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

chainguard-dev/melange#1650 · 1 comment · Opened Nov 15, 2024
Failing on destdir creation when running as non-root Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

chainguard-dev/melange#1647 · 3 comments · Opened Nov 14, 2024
Provide a new `npm/build` pipeline Open

squad:tools

Difficulty 4/5 3-5 days Newbie friendliness 45/100

chainguard-dev/melange#1625 · 1 comment · Opened Nov 8, 2024
Melange continues building the package even though it throws a 'no such file or directory' error during package generation Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

chainguard-dev/melange#1623 · Opened Nov 6, 2024

chainguard-dev/melange

Get new issues in your inbox