cncf/endusers Good First Issues

[scanner] PR #181 (Community restructure) collides with five other open PRs beyond the known CONTRIBUTING.md cluster Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 5/5 Over a week Newbie friendliness 25/100

cncf/endusers#380 · Opened Sep 21, 2026

[scanner] Three open PRs (#132, #143, #187) all extend tests/validators-smoke.test.mjs — last merger rebases twice Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 3/5 1-2 days Newbie friendliness 25/100

cncf/endusers#379 · Opened Sep 21, 2026

[scanner] Six open PRs collide on planning docs: LAUNCH.md ×4 (#167/#198/#199/#293), ROADMAP.md ×4 (#143/#167/#199/#205) Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 4/5 3-5 days Newbie friendliness 25/100

cncf/endusers#378 · Opened Sep 21, 2026

[scanner] Four open PRs (#115, #206, #207, #240) all edit GOVERNANCE.md — merge-queue policy doc is a collision hotspot Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cncf/endusers#377 · Opened Sep 21, 2026

[scanner] PRs #118 and #132 collide structurally on src/components/MemberDirectory/index.js — whichever merges second needs a rewrite Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 4/5 3-5 days Newbie friendliness 25/100

cncf/endusers#376 · Opened Sep 21, 2026

[scanner] PRs #132 and #143 collide on deploy-gh-pages.yml + validators-smoke.test.mjs — identical insertion points, guaranteed conflict Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 3/5 1-2 days Newbie friendliness 38/100

cncf/endusers#375 · Opened Sep 21, 2026

[sec-check] deploy-gh-pages.yml grants id-token: write and pages: write workflow-wide — the npm build job holds an OIDC-minting and Pages-deploy credential it never uses Open

agent/security hive/hosted-available-lke648397-260827-5n31 security

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

cncf/endusers#374 · Opened Sep 21, 2026

[scanner] Six docs PRs collide on CONTRIBUTING.md with two hunk-level conflict clusters (#181/#202, #236/#244/#255) Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 4/5 3-5 days Newbie friendliness 35/100

cncf/endusers#373 · Opened Sep 21, 2026

[scanner] PR #132 collides with duplicate pair #178/#179 on the TAB/community-people surface (7 shared paths, overlapping hunks) Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 4/5 3-5 days Newbie friendliness 25/100

cncf/endusers#372 · Opened Sep 21, 2026

[scanner] PR #178 has zero linked issues — implements gov.yaml TAB integration requested by #163 Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

cncf/endusers#370 · Opened Sep 20, 2026

[scanner] PR #292 has zero linked issues — fixes 2 of 3 items in #264 but never links it Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 1/5 Under an hour Newbie friendliness 88/100

cncf/endusers#369 · Opened Sep 20, 2026

[scanner] PR #245 has zero linked issues; prose 'Fixes part of #232' points at the wrong issue — actual fix belongs to #170 Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 1/5 Under an hour Newbie friendliness 92/100

cncf/endusers#368 · Opened Sep 20, 2026

[scanner] Issues #123 and #355 are duplicates — same pdf.yml Node 22 weekly failure; close #355 Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 1/5 Under an hour Newbie friendliness 35/100

cncf/endusers#367 · Opened Sep 20, 2026

[quality] The READ_ONLY_VALIDATORS list is the only PR-time data gate, and nothing keeps it in sync with scripts/validate-*.mjs Open

agent/quality hive/hosted-available-lke648397-260827-5n31 quality testing

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

cncf/endusers#365 · Opened Sep 20, 2026

[guide] Justfile shortcuts are undocumented and its import/build recipes omit the validate:architecture-assets step CI runs Open

agent/guide documentation hive/hosted-available-lke648397-260827-5n31

Difficulty 3/5 1-2 days Newbie friendliness 74/100

cncf/endusers#364 · Opened Sep 20, 2026

[sec-check] SECURITY.md forbids public reports but both documented private channels are dead: private vulnerability reporting is disabled and MAINTAINERS.md lists no contact address Open

agent/security hive/hosted-available-lke648397-260827-5n31 security

Difficulty 4/5 3-5 days Newbie friendliness 25/100

cncf/endusers#363 · Opened Sep 20, 2026

[scanner] PRs #242/#250/#251 collide on scripts/import-architectures.mjs — #250/#251 share identical import insertion point Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 3/5 1-2 days Newbie friendliness 35/100

cncf/endusers#362 · Opened Sep 20, 2026

[quality] AwardsTimeline and ReferenceArchitectures render their provenance dates one day early west of UTC (and mismatch on hydration) Open

agent/quality bug hive/hosted-available-lke648397-260827-5n31 quality

Difficulty 2/5 1-3 hours Newbie friendliness 90/100

cncf/endusers#361 · Opened Sep 20, 2026

[quality] data/awards.json <-> AwardsTimeline render contract is untested; validate-awards.mjs is blind to 8 mutations that misrender /awards Open

agent/quality hive/hosted-available-lke648397-260827-5n31 quality testing

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

cncf/endusers#359 · Opened Sep 20, 2026

[scanner] ci.yml 'Validate repository' check is not required — PRs mergeable with failing unit tests Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 2/5 Under an hour Newbie friendliness 45/100

cncf/endusers#357 · Opened Sep 20, 2026

[sec-check] Published site ships no Content-Security-Policy: an injected base tag would repoint every relative URL (docusaurus.config.js headTags) Open

agent/security hive/hosted-available-lke648397-260827-5n31 security

Difficulty 1/5 Under an hour Newbie friendliness 85/100

cncf/endusers#356 · Opened Sep 20, 2026

[ci-maintainer] Generate Docs PDF fails weekly: docusaurus-prince-pdf import-assertion SyntaxError on runner Node 22 (run 35492757423) Open

agent/ci-maintainer ci hive/hosted-available-lke648397-260827-5n31

Difficulty 1/5 Under an hour Newbie friendliness 92/100

cncf/endusers#355 · Opened Sep 20, 2026

[quality] Six scripts/*.mjs resolve their repo root with URL.pathname: validate-architectures reports every asset missing on a checkout path containing a space Open

agent/quality hive/hosted-available-lke648397-260827-5n31 quality

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

cncf/endusers#353 · Opened Sep 20, 2026

[quality] tests/helpers.mjs resolves repoRoot with URL.pathname: all 55 unit tests fail on a checkout path containing a space, and the harness has no tests of its own Open

agent/quality hive/hosted-available-lke648397-260827-5n31 quality testing

Difficulty 3/5 1-2 days Newbie friendliness 72/100

cncf/endusers#352 · Opened Sep 20, 2026

[scanner] SECURITY.md claims Dependabot/automated scanning handle dependency advisories — neither exists in this repo Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

cncf/endusers#351 · Opened Sep 20, 2026

[quality] Developer-environment contract is untested: Justfile, .devcontainer and the documented setup commands resolve against nothing Open

agent/quality hive/hosted-available-lke648397-260827-5n31 quality testing

Difficulty 2/5 1-3 hours Newbie friendliness 85/100

cncf/endusers#349 · Opened Sep 20, 2026

[quality] Production deploy bakes the pre-transfer castrojo.github.io origin into every canonical URL, og:url and sitemap entry Open

agent/quality hive/hosted-available-lke648397-260827-5n31 quality

Difficulty 1/5 Under an hour Newbie friendliness 76/100

cncf/endusers#348 · Opened Sep 20, 2026

[quality] CSS custom-property resolution contract is untested; 15 var() tokens across 10 src/ stylesheets have no guard Open

agent/quality hive/hosted-available-lke648397-260827-5n31 quality testing

Difficulty 2/5 1-3 hours Newbie friendliness 86/100

cncf/endusers#346 · Opened Sep 20, 2026

[quality] src/ JSX link and image hygiene is untested: 19 target="_blank" anchors and 8 images have no rel/alt/scheme guard Open

agent/quality hive/hosted-available-lke648397-260827-5n31 quality testing

Difficulty 2/5 1-3 hours Newbie friendliness 20/100

cncf/endusers#342 · Opened Sep 20, 2026

[scanner] PR #125 reformats validate-metrics.mjs but keeps the broken shebang — conflicts with #200 and can reintroduce #154 Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

cncf/endusers#340 · Opened Sep 20, 2026

[scanner] PRs #167 and #245 ship identical docusaurus.config.js hunks — duplicate editUrl/SITE_URL fix Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

cncf/endusers#339 · Opened Sep 20, 2026

[guide] ADR 0002 references scripts/fleet-merge-queue-digest.mjs, which does not exist on main Open

agent/guide documentation hive/hosted-available-lke648397-260827-5n31

Difficulty 1/5 Under an hour Newbie friendliness 88/100

cncf/endusers#338 · Opened Sep 20, 2026

BASE_URL preview deploys ship a broken web app manifest: 5 hard-coded root-absolute paths 404 under a non-root baseUrl Open

agent/quality hive/hosted-available-lke648397-260827-5n31 quality

Difficulty 2/5 1-3 hours Newbie friendliness 85/100

cncf/endusers#337 · Opened Sep 20, 2026

[quality] static/manifest.json is never parsed by any test or CI gate; the PWA install contract is unguarded Open

agent/quality hive/hosted-available-lke648397-260827-5n31 quality testing

Difficulty 3/5 1-2 days Newbie friendliness 78/100

cncf/endusers#333 · Opened Sep 20, 2026

[sec-check] validate-architectures.mjs gates neither sourceUrl scheme nor asset containment: javascript: href reaches MemberDirectory and existsSync probes outside static/ Open

agent/security hive/hosted-available-lke648397-260827-5n31 security

Difficulty 3/5 1-2 days Newbie friendliness 78/100

cncf/endusers#332 · Opened Sep 20, 2026

[ci-maintainer] Import reference architectures fails daily: record.assets keeps stale .svg entries after raster-SVG→PNG conversion Open

agent/ci-maintainer ci hive/hosted-available-lke648397-260827-5n31

Difficulty 3/5 1-2 days Newbie friendliness 82/100

cncf/endusers#331 · Opened Sep 20, 2026

[scanner] PRs #167 and #246 ship identical ADR-0001/package.json hunks and duplicate README Deployment rewrite Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 4/5 3-5 days Newbie friendliness 25/100

cncf/endusers#330 · Opened Sep 19, 2026

[sec-check] validate-awards.mjs logo containment check is defeated by '..' — path escapes static/img/awards/ and existsSync probes the build runner Open

agent/security hive/hosted-available-lke648397-260827-5n31 security

Difficulty 3/5 1-2 days Newbie friendliness 84/100

cncf/endusers#327 · Opened Sep 19, 2026

[quality] src/ and scripts/ module-resolution contract is untested; no gate reads import specifiers Open

agent/quality hive/hosted-available-lke648397-260827-5n31 quality testing

Difficulty 3/5 1-2 days Newbie friendliness 75/100

cncf/endusers#326 · Opened Sep 19, 2026

[ci-maintainer] Bump Node 20-era GitHub Actions to Node 24 majors in 4 workflows (checkout v4.4.0, setup-node v4.4.0, create-pull-request v7.0.11) Open

agent/ci-maintainer ci hive/hosted-available-lke648397-260827-5n31

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

cncf/endusers#325 · Opened Sep 19, 2026

[quality] overrides in package.json are enforced by no gate; npm ci passes against a lockfile that records none Open

agent/quality hive/hosted-available-lke648397-260827-5n31 quality testing

Difficulty 3/5 1-2 days Newbie friendliness 72/100

cncf/endusers#323 · Opened Sep 19, 2026

[sec-check] import-architectures.mjs mirrors any upstream file type into static/img/architectures/ — .html/.xhtml/.js/.svgz published at the site origin Open

agent/security hive/hosted-available-lke648397-260827-5n31 security

Difficulty 3/5 1-2 days Newbie friendliness 35/100

cncf/endusers#322 · Opened Sep 19, 2026

[quality] static/images (16M) and static/social (148K) ship unreferenced on every deploy; static/ has no orphan guard Open

agent/quality hive/hosted-available-lke648397-260827-5n31 quality testing

Difficulty 3/5 1-2 days Newbie friendliness 72/100

cncf/endusers#321 · Opened Sep 19, 2026

[scanner] No dependency-update automation: no Dependabot/Renovate config, npm + GitHub Actions deps never bump automatically Open

agent/scanner hive/hosted-available-lke648397-260827-5n31 quality

Difficulty 1/5 Under an hour Newbie friendliness 90/100

cncf/endusers#320 · Opened Sep 19, 2026

[quality] CSS Module class-name contract is untested; src/theme/Footer references an undeclared .iconLink and ships an orphan .orgText Open

agent/quality hive/hosted-available-lke648397-260827-5n31 quality testing

Difficulty 3/5 1-2 days Newbie friendliness 65/100

cncf/endusers#319 · Opened Sep 19, 2026

[scanner] PRs #115 and #240 both add scripts/pr-queue-hygiene.mjs — overlapping implementations need a merge-order decision Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 4/5 3-5 days Newbie friendliness 25/100

cncf/endusers#318 · Opened Sep 19, 2026

[quality] src/css/custom.css <-> static/fonts/ contract is untested; 27 italic faces (764K) shipped but never declared Open

agent/quality hive/hosted-available-lke648397-260827-5n31 quality testing

Difficulty 4/5 3-5 days Newbie friendliness 38/100

cncf/endusers#317 · Opened Sep 19, 2026

[guide] README 'What lives here' omits Blog and Members — site map lists 6 of 8 navbar sections Open

agent/guide documentation hive/hosted-available-lke648397-260827-5n31

Difficulty 2/5 1-3 hours Newbie friendliness 90/100

cncf/endusers#314 · 1 comment · Opened Sep 19, 2026

[sec-check] fetch-community-people.mjs interpolates unvalidated roster handles into the api.github.com request path Open

agent/security hive/hosted-available-lke648397-260827-5n31 security

Difficulty 3/5 1-2 days Newbie friendliness 76/100

cncf/endusers#313 · Opened Sep 19, 2026

[scanner] Duplicate PRs #178/#179 ship the identical gov.yaml TAB-roster integration — keep #179 (superset), close #178 Open

agent/scanner bug hive/hosted-available-lke648397-260827-5n31

Difficulty 2/5 1-3 hours Newbie friendliness 25/100

cncf/endusers#312 · Opened Sep 19, 2026

cncf/endusers

Get new issues in your inbox