ossf/allstar

View on GitHub

GitHub App to set and enforce security policies

Stars: 1.5k
Forks: 152
Open beginner issues: 0
Indexed issues: 59
Avg merge: 1d 2h
Merged PRs (30d): 6

Dominant language: Go
License: Apache-2.0
Last GitHub push: Sep 8, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted good first issue

Beginner friendly Everything

Open All

59 open issues indexed

[IMPORTANT] OpenSSF-hosted Allstar app is retired; move to self-hosted Open

ossf/allstar#881 · 1 assignee · Opened Aug 31, 2026
Missing elements in branch protection rules Open

needs triage Stale

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/allstar#773 · 1 comment · Opened Jan 15, 2026
Refactor: Use context to pass action URLs instead of redundant pagination searches Open

Stale

Difficulty 4/5 3-5 days Newbie friendliness 30/100

ossf/allstar#762 · 1 comment · Opened Nov 26, 2025
Allstar issue missing context about what went wrong specifically and how to resolve Open

Stale

ossf/allstar#738 · 1 comment · 1 assignee · Opened Sep 26, 2025
Better documentation for GitHub Actions and `CODEOWNERS` Open

documentation good first issue

ossf/allstar#726 · 3 comments · 1 assignee · Opened Aug 18, 2025
Re-enable select linters after golangci-lint v8.0.0 upgrade Open

improvements

ossf/allstar#716 · 2 comments · 2 assignees · Opened Aug 3, 2025
Add instrumentation tests Open

improvements

Difficulty 4/5 3-5 days Newbie friendliness 42/100

ossf/allstar#646 · Opened Feb 11, 2025
false CODEOWNERS reports on forks Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 38/100

ossf/allstar#627 · Opened Jan 14, 2025
Confirm the expected layout of enforceBranches config Open

enhancement Stale

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

ossf/allstar#617 · 1 comment · Opened Dec 19, 2024
Provide offical config schema Open

enhancement Stale

Difficulty 5/5 Over a week Newbie friendliness 35/100

ossf/allstar#605 · 4 comments · Opened Nov 27, 2024
Scan Dangerous Workflows in non-default branches Open

enhancement Stale

Difficulty 5/5 Over a week Newbie friendliness 35/100

ossf/allstar#569 · 1 comment · 4 reactions · Opened Sep 19, 2024
Issue with Allstar Branch Protection Enforcement (404 errors upon action: fix) Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ossf/allstar#562 · 3 comments · Opened Aug 23, 2024
Update emitted copy around OpenSSF Scorecard checks Open

documentation

ossf/allstar#535 · 1 comment · 1 assignee · Opened Jul 2, 2024
Allstar operations overview follow-ups Open

infrastructure

ossf/allstar#528 · 2 comments · 2 assignees · Opened Jul 1, 2024
Outside collaborators should be override-able at the repo-level Open

enhancement good first issue no-stale proposal

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ossf/allstar#525 · 4 comments · Opened Jun 21, 2024
Emit logs with details about configuration origin and final configuration Open

enhancement good first issue help wanted

Difficulty 4/5 3-5 days Newbie friendliness 38/100

ossf/allstar#524 · Opened Jun 20, 2024
[improvement] Allow app running with --once to exit with error when policy errors are encountered Open

enhancement help wanted needs design

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ossf/allstar#503 · 1 comment · 1 reaction · Opened Mar 20, 2024
Policy for checking for arbitrary file existence Open

enhancement help wanted needs design

Difficulty 5/5 Over a week Newbie friendliness 30/100

ossf/allstar#500 · 8 comments · 4 reactions · Opened Mar 18, 2024
Create GitHub private vulnerability reports as an action Open

action enhancement help wanted

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ossf/allstar#498 · 1 reaction · Opened Mar 11, 2024
[Feature Request]: Check rulesets for branch protection rules Open

enhancement help wanted needs design

Difficulty 4/5 3-5 days Newbie friendliness 52/100

ossf/allstar#475 · 4 comments · 3 reactions · Opened Nov 24, 2023
Add a gittuf policy Open

enhancement help wanted needs design

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/allstar#459 · 1 comment · 1 reaction · Opened Oct 3, 2023
Update operator.md permissions required Open

documentation help wanted

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

ossf/allstar#392 · Opened Mar 30, 2023
Monitor/enable GitHub's secret detection feature Open

enhancement good first issue help wanted

Difficulty 4/5 3-5 days Newbie friendliness 42/100

ossf/allstar#363 · 4 comments · Opened Mar 2, 2023
Please implement backoff strategy for pings. Open

enhancement good first issue help wanted

Difficulty 4/5 3-5 days Newbie friendliness 25/100

ossf/allstar#338 · 2 comments · Opened Jan 21, 2023
Update Quickstart Open

documentation

ossf/allstar#336 · 1 comment · 1 reaction · 1 assignee · Opened Jan 11, 2023
Clarify that allstar must be able to access the .allstar repo Open

documentation help wanted

Difficulty 1/5 1-3 hours Newbie friendliness 45/100

ossf/allstar#328 · Opened Dec 14, 2022
Clarify when Allstar app is ran Open

documentation good first issue help wanted infrastructure

ossf/allstar#326 · 1 comment · 2 reactions · 1 assignee · Opened Dec 9, 2022
Add documentation for actions.yaml Open

documentation help wanted

Difficulty 3/5 1-2 days Newbie friendliness 42/100

ossf/allstar#324 · 1 comment · Opened Dec 9, 2022
Allow to have different versions of checks in scorecard.yaml for public and private repositories Open

enhancement Stale

Difficulty 4/5 3-5 days Newbie friendliness 42/100

ossf/allstar#323 · 1 comment · Opened Dec 9, 2022
SECURITY-INSIGHTS.yml implementation Open

enhancement Stale

Difficulty 3/5 1-2 days Newbie friendliness 38/100

ossf/allstar#317 · 3 comments · Opened Nov 23, 2022
Update examples Open

documentation help wanted

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ossf/allstar#316 · 2 comments · Opened Nov 15, 2022
[Feature Request] Require conversation resolution Open

enhancement help wanted

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/allstar#311 · 3 comments · Opened Nov 10, 2022
App doesn't report an error when it exists, but is not installed in any organisations Open

enhancement good first issue help wanted

Difficulty 3/5 1-2 days Newbie friendliness 35/100

ossf/allstar#294 · 1 comment · Opened Sep 21, 2022
[Feature Request] Send notifications to webhook Open

enhancement help wanted needs design

Difficulty 5/5 Over a week Newbie friendliness 28/100

ossf/allstar#285 · 1 reaction · Opened Sep 1, 2022
Policy Idea: Default workflow permissions. Open

enhancement Stale

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/allstar#273 · 1 comment · Opened Aug 24, 2022
Update issue when NotifyText changes Open

enhancement good first issue no-stale

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ossf/allstar#251 · 2 comments · Opened Aug 5, 2022
Proposal: RPC Action Open

enhancement Stale

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/allstar#247 · 2 comments · Opened Aug 2, 2022
Use webhooks to decide when to enforce in repos Open

enhancement Stale

Difficulty 5/5 Over a week Newbie friendliness 15/100

ossf/allstar#242 · 4 comments · Opened Jul 25, 2022
Feature: Audit installed GitHub apps Open

enhancement Stale

Difficulty 4/5 3-5 days Newbie friendliness 30/100

ossf/allstar#234 · 1 comment · 1 reaction · Opened Jul 13, 2022
Limit how many branches and tags can be updated in a single push Open

enhancement Stale

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ossf/allstar#231 · 3 comments · Opened Jul 5, 2022
Proposal: don't allow appending enforceBranches on repo level if disableRepoOverride is true Open

enhancement Stale

Difficulty 5/5 Over a week Newbie friendliness 35/100

ossf/allstar#211 · 5 comments · Opened Jun 15, 2022
Namespace Env vars that Allstar uses Open

enhancement good first issue help wanted

Difficulty 3/5 1-2 days Newbie friendliness 45/100

ossf/allstar#208 · 1 reaction · Opened Jun 14, 2022
Suggestion: provide option to disable warning followups, or make it clear how to do so. Open

enhancement Stale

Difficulty 5/5 Over a week Newbie friendliness 35/100

ossf/allstar#205 · 1 comment · Opened Jun 11, 2022
Write an Allstar Mission and Vision Open

documentation maintainer

ossf/allstar#164 · 2 assignees · Opened Apr 7, 2022
How to handle invalid config? Open

enhancement no-stale

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/allstar#158 · 8 comments · Opened Apr 5, 2022
Monthly Email Text Open

enhancement Stale

Difficulty 1/5 1-3 hours Newbie friendliness 35/100

ossf/allstar#146 · 1 comment · Opened Mar 21, 2022
Releases (and versioning) Open

documentation maintainer

ossf/allstar#145 · 5 comments · 2 assignees · Opened Mar 21, 2022
Process to roll out functionality changes Open

documentation infrastructure maintainer

ossf/allstar#144 · 1 comment · 2 assignees · Opened Mar 21, 2022
Add a policy for GitHub Actions workflow run approval configurations Open

enhancement help wanted needs design

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ossf/allstar#138 · 1 comment · Opened Mar 14, 2022
Add a policy for GITHUB_TOKEN permissions or mode Open

enhancement Stale

Difficulty 5/5 Over a week Newbie friendliness 30/100

ossf/allstar#137 · 3 comments · Opened Mar 14, 2022

ossf/allstar

Get new issues in your inbox