sefe/dorc

View on GitHub

This project is an engine for running/orchestrating DevOps deployments whilst managing environments & configuration

Stars: 5
Forks: 3
Open beginner issues: 0
Indexed issues: 92
Avg merge: 1d 22h
Merged PRs (30d): 14

Dominant language: C#
License: Apache-2.0
Last GitHub push: Sep 10, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: good first issue help wanted

Beginner friendly Everything

Open All

92 open issues indexed

leave only "deploy" button on deploy dialog window and click "cross" button or any place to cancell the request Open

DORC UT 02

sefe/dorc#921 · 1 assignee · Opened Sep 11, 2026
add "what's new" page to dorc Open

area:ui

sefe/dorc#920 · 1 assignee · Opened Sep 10, 2026
Bug on updating variable's value Open

DORC DV 02

sefe/dorc#919 · 1 assignee · Opened Sep 10, 2026
Implement "import variable" functionality Open

area:tools-cli area:ui

sefe/dorc#918 · 1 assignee · Opened Sep 10, 2026
Update the .NET Framework version from 8 to 10 for the DOrc Open

dependencies tech-debt

sefe/dorc#915 · 1 assignee · Opened Sep 7, 2026
Variable Scoped Options resolver is resolving incorrect values Open

Difficulty 3/5 1-2 days Newbie friendliness 62/100

sefe/dorc#902 · Opened Sep 1, 2026
make a logo updated for public holidays (christmas, easter, halloween, saint patrick) Open

area:ui

sefe/dorc#895 · 1 assignee · Opened Aug 26, 2026
Close out the deployment privilege containment sequence, and record what "delivered" does not mean Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

sefe/dorc#880 · Opened Aug 17, 2026
S-018b: nothing verifies a script's bytes against its baseline before executing them Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

sefe/dorc#878 · Opened Aug 17, 2026
S-018a: a script has no recorded identity, so nothing can tell whether the bytes executed are the bytes intended Open

Difficulty 4/5 3-5 days Newbie friendliness 58/100

sefe/dorc#876 · Opened Aug 17, 2026
S-019 (UI half): the script-visibility classification has no surface in the web UI Open

Difficulty 4/5 3-5 days Newbie friendliness 68/100

sefe/dorc#874 · Opened Aug 17, 2026
S-022: record what attribution per-environment identity reaches, and what it does not Open

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

sefe/dorc#872 · Opened Aug 17, 2026
W-8a: local Terraform plan artefacts are world-readable on the deployment host and never removed Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

sefe/dorc#870 · Opened Aug 17, 2026
S-021: deployment execution identity is a boolean, so one compromised deployment reaches the whole tier Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

sefe/dorc#868 · Opened Aug 17, 2026
Deployment credential resolution is duplicated across four sites, and the vault reader is unreachable from the Monitor Open

Difficulty 5/5 Over a week Newbie friendliness 45/100

sefe/dorc#861 · Opened Aug 17, 2026
Deployment credentials require rotation, and three scripts must be migrated first Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

sefe/dorc#859 · Opened Aug 17, 2026
Stored script paths are not confined at dispatch, and the off-share population is unknown Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

sefe/dorc#857 · Opened Aug 17, 2026
A C# compiler is reachable from deployment data in the Monitor process Open

Difficulty 5/5 Over a week Newbie friendliness 45/100

sefe/dorc#855 · Opened Aug 17, 2026
Config values have no per-key control over whether scripts may see them Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

sefe/dorc#853 · Opened Aug 17, 2026
CanReadSecrets is granted implicitly to owners and cannot be restricted to machines Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

sefe/dorc#849 · Opened Aug 14, 2026
Every secure config value is injected into every matching deployment Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

sefe/dorc#847 · Opened Aug 14, 2026
Source credentials are chosen by substring test and offered to arbitrary hosts Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

sefe/dorc#845 · Opened Aug 14, 2026
Project source URLs are never checked against a host allow-list Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

sefe/dorc#843 · Opened Aug 14, 2026
Component script paths are not validated, so a rooted path escapes the script root Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

sefe/dorc#841 · Opened Aug 14, 2026
Runner process security descriptor is inert, and two handles leak per dispatch Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

sefe/dorc#839 · Opened Aug 14, 2026
Script-group named pipe is unauthenticated in both directions Open

Difficulty 5/5 Over a week Newbie friendliness 42/100

sefe/dorc#837 · Opened Aug 14, 2026
Script-group bundles and Terraform working directories persist indefinitely Open

Difficulty 4/5 3-5 days Newbie friendliness 50/100

sefe/dorc#835 · Opened Aug 14, 2026
Runner logs write resolved property values, including secrets Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

sefe/dorc#833 · Opened Aug 14, 2026
Build drop location is accepted from any reachable file share Open

Difficulty 3/5 1-2 days Newbie friendliness 65/100

sefe/dorc#831 · Opened Aug 14, 2026
Request-supplied property values reach the C# expression compiler Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

sefe/dorc#829 · Opened Aug 14, 2026
Daemon status probe is unauthorized; API scope policy is inert in combined auth mode Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

sefe/dorc#827 · Opened Aug 14, 2026
Terraform approval endpoints have no authorization at all Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

sefe/dorc#825 · Opened Aug 14, 2026
Deployment privilege containment: plan and estate inventory Open

Difficulty 5/5 Over a week Newbie friendliness 38/100

sefe/dorc#823 · Opened Aug 14, 2026
Tags should have some kind of mangement for making them easier to manage now that we are getting lots of them Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

sefe/dorc#821 · Opened Aug 11, 2026
Update DOrc.Api.Client Open

tech-debt

sefe/dorc#806 · 1 assignee · Opened Aug 3, 2026
implement monitoring of Kafka\DORC functionality Open

sefe/dorc#805 · 1 assignee · Opened Aug 3, 2026
design and implement maintenance mode for DORC Open

area:deploy-engine area:monitor-ha area:ui

sefe/dorc#788 · 1 assignee · Opened Jul 29, 2026
Maintenance Window for each Environment Open

Difficulty 5/5 Over a week Newbie friendliness 42/100

sefe/dorc#787 · Opened Jul 28, 2026
the build number link on the deploy result page needs to update based project type (github/file/etc) Open

sefe/dorc#783 · 1 assignee · Opened Jul 27, 2026
Environment details: implement Containers, Cloud, and APIs component tabs Open

sefe/dorc#781 · 1 assignee · Opened Jul 24, 2026
Implement Containers, Cloud, and APIs environment component tabs Open

sefe/dorc#780 · 1 assignee · Opened Jul 23, 2026
Support expanded server tags and real database tag semantics Open

DORC UT 01

sefe/dorc#779 · 2 assignees · Opened Jul 23, 2026
pen test Aikido API from DORC UT 02 Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

sefe/dorc#767 · Opened Jul 8, 2026
Standardize API error responses to a single error field Open

enhancement tech-debt

Difficulty 5/5 Over a week Newbie friendliness 35/100

sefe/dorc#752 · Opened Jun 25, 2026
453493 Changes in Dorc monitor-requests Filters Open

enhancement

sefe/dorc#743 · 1 assignee · Opened Jun 19, 2026
Update /src/Tools.SQLRestoreCLI/Program.cs Open

DORC DV 01 enhancement

sefe/dorc#730 · 2 assignees · Opened Jun 11, 2026
Analytics: inconsistent "failure" definitions between summary tile and Environment Usage chart Open

analytics bug

Difficulty 4/5 3-5 days Newbie friendliness 48/100

sefe/dorc#729 · 1 comment · Opened Jun 11, 2026
UX: checkbox labels should reference input id so label text is clickable Open

enhancement

sefe/dorc#708 · 1 reaction · 2 assignees · Opened May 28, 2026
452253 [InternalQuestion] Problem with git/azure workflows Open

help wanted

sefe/dorc#704 · 2 assignees · Opened May 27, 2026
[User Feedback] When deploying, permissions are applied to users from the database not in alphabetical order of the users. Open

sefe/dorc#703 · 1 assignee · Opened May 26, 2026

sefe/dorc

Get new issues in your inbox