zarf-dev/zarf

Sign in to follow View on GitHub

The Airgap Native Package Manager for Kubernetes

Is zarf-dev/zarf beginner-friendly?

In the last 30 days, zarf-dev/zarf merged 15 of 76 pull requests from outside contributors, and its maintainers usually reply within 2 days. 4 beginner-friendly issues are open now.

Stars
2.1k
Forks
281
Open beginner issues
4
Indexed issues
273
Avg merge
3d 2h
Merged PRs (30d)
79
Dominant language
Go
License
Apache-2.0
Last GitHub push
Oct 5, 2026
Latest indexed
Oct 6, 2026
Contributing guide
Code of conduct
Beginner labels
help wanted

How to contribute to zarf-dev/zarf

  1. Read the contributing guide first: it says how the maintainers want changes proposed, tested and reviewed.
  2. It ships a Dockerfile or Docker Compose file, so you can run it without installing its whole toolchain.
  3. Read its code of conduct: it covers issues and pull requests as well as chat.
  4. Pick one of the 4 open beginner-friendly issues below and comment that you want to work on it before you start.
Beginner friendly Everything
Open All

Issues somebody may already be working on are listed last. List everything by date

  • Support safe diagnostics for sensitive Package Values
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 49/100

    zarf-dev/zarf#5658 ·

    Maintainers usually reply within 2 days

  • How Does Zarf Agent Handle Image Mutation When the Source and Zarf Registry Hostnames Are Identical?
    Open
    • Is something wrong?

    Difficulty 4/5 1-2 days Newbie friendliness 22/100

    zarf-dev/zarf#5603 ·

    Maintainers usually reply within 2 days

  • Migrate documentation website to an independent repository
    Open
    • Is something wrong?
    post-v1.0.0

    Difficulty 4/5 3-5 days Newbie friendliness 15/100

    zarf-dev/zarf#5590 · 1 comment · 1 reaction ·

    Maintainers usually reply within 2 days

  • Logs: Standardize deployment logs
    Open
    • Is something wrong?
    enhancement ✨

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    zarf-dev/zarf#5589 · 1 comment ·

    Maintainers usually reply within 2 days

  • Minimize dependencies pulled in by the Zarf SDK
    May be free again Open
    • Is something wrong?
    needs-design needs-investigation post-v1.0.0

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    zarf-dev/zarf#5564 · 2 comments ·

    Maintainers usually reply within 2 days

  • Adopt existing namespaces during deployment unless explicitly excluded
    May be free again Open
    • Is something wrong?
    enhancement ✨

    Difficulty 4/5 3-5 days Newbie friendliness 48/100

    zarf-dev/zarf#5557 · 1 comment ·

    Maintainers usually reply within 2 days

  • Several flavor support
    Open
    • Is something wrong?
    enhancement ✨

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    zarf-dev/zarf#5490 · 5 comments ·

    Maintainers usually reply within 2 days

  • Clarification on ACR Push Permissions and Credential Usage in Zarf
    Open
    • Is something wrong?

    Difficulty 2/5 1-3 hours Newbie friendliness 25/100

    zarf-dev/zarf#5466 · 2 comments ·

    Maintainers usually reply within 2 days

  • When zarf can't find components.[].charts.[].valuesFiles.[] in the file system, throw error
    May be free again Open
    • Is something wrong?
    possible-bug 🐛 waiting-reply

    zarf-dev/zarf#5440 · 1 comment · 1 assignee ·

    Maintainers usually reply within 2 days

  • Introduce sigstore-go signing operations
    May be free again Open
    • Is something wrong?
    enhancement ✨ post-v1.0.0

    Difficulty 5/5 Over a week Newbie friendliness 25/100

    zarf-dev/zarf#5408 · 3 comments ·

    Maintainers usually reply within 2 days

  • feat: OCI Resumable Pull Support
    Open
    • Is something wrong?
    enhancement ✨

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    zarf-dev/zarf#5397 · 2 comments ·

    Maintainers usually reply within 2 days

  • `zarf connect --local-port=0` should allow programmatic discovery of bound port
    Open
    • Is something wrong?
    enhancement ✨ needs-investigation

    Difficulty 3/5 1-2 days Newbie friendliness 67/100

    zarf-dev/zarf#5356 · 4 comments ·

    Maintainers usually reply within 2 days

  • Allow architecture-specific packages to select one platform from a digest-pinned OCI image index
    Open
    • Is something wrong?
    enhancement ✨ needs-design waiting-reply

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    zarf-dev/zarf#5338 · 1 comment · 1 reaction ·

    Maintainers usually reply within 2 days

  • feat: support declaring application-level CPEs in package metadata and generated SBOMs
    Open
    • Is something wrong?
    enhancement ✨

    Difficulty 4/5 3-5 days Newbie friendliness 42/100

    zarf-dev/zarf#5337 · 3 comments ·

    Maintainers usually reply within 2 days

  • zarf init fails on OpenShift/CRI-O 1.35+ (ROSA 4.22+): injector's HTTP seed registry rejected, registry-mode=proxy doesn't fix it
    Open
    • Is something wrong?
    bug 🐞

    Difficulty 4/5 3-5 days Newbie friendliness 38/100

    zarf-dev/zarf#5325 · 4 comments ·

    Maintainers usually reply within 2 days

  • dev generate-schema drops nested chart schema properties for empty map defaults
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 66/100

    zarf-dev/zarf#5314 · 3 comments ·

    Maintainers usually reply within 2 days

  • Enhance ability to get a full status of the deployed package and components
    Open
    • Is something wrong?
    enhancement ✨ waiting-reply

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    zarf-dev/zarf#5284 · 1 comment ·

    Maintainers usually reply within 2 days

  • In place package upgrade conflicts when rename manifests or moving them between componets
    Open
    • Is something wrong?
    possible-bug 🐛 waiting-reply

    Difficulty 4/5 3-5 days Newbie friendliness 48/100

    zarf-dev/zarf#5283 · 1 comment ·

    Maintainers usually reply within 2 days

  • OCI package operations can read inconsistent content when a tag changes mid-operation
    Open
    • Is something wrong?
    bug 🐞

    Difficulty 4/5 3-5 days Newbie friendliness 45/100

    zarf-dev/zarf#5276 ·

    Maintainers usually reply within 2 days

  • Replace checksums.txt with an OCI manifest
    Open
    • Is something wrong?
    needs-design

    Difficulty 5/5 Over a week Newbie friendliness 25/100

    zarf-dev/zarf#5255 ·

    Maintainers usually reply within 2 days

  • zarf package pull on unstable networks can fail with a nonsense error
    Open
    • Is something wrong?
    needs-investigation possible-bug 🐛

    Difficulty 4/5 3-5 days Newbie friendliness 52/100

    zarf-dev/zarf#5244 · 2 comments ·

    Maintainers usually reply within 2 days

  • Add rendered values checks to zarf dev lint when using zarf values
    Open
    • Is something wrong?
    enhancement ✨

    Difficulty 4/5 3-5 days Newbie friendliness 48/100

    zarf-dev/zarf#5242 · 1 comment ·

    Maintainers usually reply within 2 days

  • Warn when values are provided for excluded Helm paths
    Open
    • Is something wrong?
    enhancement ✨

    Difficulty 3/5 1-2 days Newbie friendliness 58/100

    zarf-dev/zarf#5241 · 2 comments ·

    Maintainers usually reply within 2 days

  • feat: support mTLS for `zarf package *` registry interactions
    Open
    • Is something wrong?
    enhancement ✨

    Difficulty 4/5 3-5 days Newbie friendliness 45/100

    zarf-dev/zarf#5213 · 1 comment ·

    Maintainers usually reply within 2 days

  • Set OCI artifact type for packages
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 65/100

    zarf-dev/zarf#5205 · 2 comments ·

    Maintainers usually reply within 2 days

  • Evidence of signature verification should be auditable
    May be free again Open
    • Is something wrong?
    enhancement ✨

    zarf-dev/zarf#5191 · 1 assignee ·

    Maintainers usually reply within 2 days

  • Support direct container-runtime imports as an alternative to registry delivery
    Open
    • Is something wrong?
    enhancement ✨ needs-investigation

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    zarf-dev/zarf#5183 · 8 comments ·

    Maintainers usually reply within 2 days

  • inspect command for package values
    May be free again Open
    • Is something wrong?
    enhancement ✨

    zarf-dev/zarf#5137 · 2 comments · 1 assignee ·

    Maintainers usually reply within 2 days

  • Support fetching a package digest and metadata from the same OCI manifest
    May be free again Open
    • Is something wrong?
    enhancement ✨

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    zarf-dev/zarf#5096 · 1 comment ·

    Maintainers usually reply within 2 days

  • `zarf dev generate-schema` includes values for "unimported" components
    May be free again Open
    • Is something wrong?
    possible-bug 🐛

    Difficulty 3/5 1-2 days Newbie friendliness 42/100

    zarf-dev/zarf#5086 · 1 comment ·

    Maintainers usually reply within 2 days

  • Deploy-time component filtering for single-artifact packages
    Open
    • Is something wrong?
    post-v1.0.0

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    zarf-dev/zarf#5055 · 2 comments ·

    Maintainers usually reply within 2 days

  • Add retries to pull operations
    Open
    • Is something wrong?
    enhancement ✨

    Difficulty 4/5 3-5 days Newbie friendliness 45/100

    zarf-dev/zarf#5034 ·

    Maintainers usually reply within 2 days

  • Proxy Mode Enabled Zarf Variable in the Zarf Init package
    Open
    • Is something wrong?
    enhancement ✨ needs-investigation

    Difficulty 3/5 1-2 days Newbie friendliness 52/100

    zarf-dev/zarf#5028 · 1 comment ·

    Maintainers usually reply within 2 days

  • Flake: mutating webhook timing out in e2e test labeled mode
    May be free again Open
    • Is something wrong?

    zarf-dev/zarf#4986 · 1 assignee ·

    Maintainers usually reply within 2 days

  • Upload Zarf SBOMs for images to the Zarf Registry to enable downstream lookups
    Open
    • Is something wrong?
    enhancement ✨ post-v1.0.0

    Difficulty 4/5 3-5 days Newbie friendliness 45/100

    zarf-dev/zarf#4958 · 1 comment ·

    Maintainers usually reply within 2 days

  • Fix typos in tests and image discovery fixtures
    May be free again Open
    • Is something wrong?

    zarf-dev/zarf#4944 · 1 assignee ·

    Maintainers usually reply within 2 days

  • Trusted Signers viper configuration
    Open
    • Is something wrong?
    enhancement ✨ needs-investigation

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    zarf-dev/zarf#4899 ·

    Maintainers usually reply within 2 days

  • Introduce a script verifying dependencies
    May be free again Open
    • Is something wrong?

    zarf-dev/zarf#4894 · 1 assignee ·

    Maintainers usually reply within 2 days

  • deduplicate tar writing logic
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 52/100

    zarf-dev/zarf#4822 · 1 comment ·

    Maintainers usually reply within 2 days

  • Support for Immutable Releases
    Open
    • Is something wrong?
    needs-investigation

    Difficulty 5/5 Over a week Newbie friendliness 30/100

    zarf-dev/zarf#4821 · 1 reaction ·

    Maintainers usually reply within 2 days

  • Add OCI annotations to Image Index (in addition to the Image Manifest)
    May be free again Open
    • Is something wrong?
    enhancement ✨ good first issue 🥇 help-wanted

    zarf-dev/zarf#4796 · 2 comments · 1 assignee ·

    Maintainers usually reply within 2 days

  • Expose some useful sbom and tar related functions.
    May be free again Open
    • Is something wrong?
    enhancement ✨

    Difficulty 3/5 1-2 days Newbie friendliness 35/100

    zarf-dev/zarf#4794 · 10 comments ·

    Maintainers usually reply within 2 days

  • Add CLI tool for finding latest helm versions
    Open
    • Is something wrong?
    enhancement ✨ help-wanted needs-investigation

    Difficulty 4/5 3-5 days Newbie friendliness 48/100

    zarf-dev/zarf#4781 · 3 comments ·

    Maintainers usually reply within 2 days

  • Document: Required zarf RBAC permissions
    May be free again Open
    • Is something wrong?
    v1.0.0

    zarf-dev/zarf#4772 · 3 comments · 1 reaction · 1 assignee ·

    Maintainers usually reply within 2 days

  • Package inspect parity for DeployedPackage
    Open
    • Is something wrong?
    needs-investigation

    Difficulty 5/5 Over a week Newbie friendliness 30/100

    zarf-dev/zarf#4768 ·

    Maintainers usually reply within 2 days

  • Allow skipCrds in charts
    Open
    • Is something wrong?
    enhancement ✨

    Difficulty 3/5 1-2 days Newbie friendliness 35/100

    zarf-dev/zarf#4746 · 2 comments ·

    Maintainers usually reply within 2 days

  • Merge Manifests and Charts sections of Components to allow fine grained ordering
    Open
    • Is something wrong?
    enhancement ✨ needs-investigation

    Difficulty 5/5 Over a week Newbie friendliness 25/100

    zarf-dev/zarf#4743 · 2 comments ·

    Maintainers usually reply within 2 days

  • Feature: Add password flag for zarf tools gen-key
    May be free again Open
    • Is something wrong?
    enhancement ✨ go good first issue 🥇 help-wanted

    zarf-dev/zarf#4739 · 3 comments · 1 assignee ·

    Maintainers usually reply within 2 days

  • Expose create time `force-conflicts` option
    Open
    • Is something wrong?
    enhancement ✨

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    zarf-dev/zarf#4731 · 1 reaction ·

    Maintainers usually reply within 2 days

  • Reproducible zarf package create
    May be free again Open
    • Is something wrong?
    enhancement ✨

    Difficulty 4/5 1-2 days Newbie friendliness 50/100

    zarf-dev/zarf#4702 · 3 comments ·

    Maintainers usually reply within 2 days

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.