SorobanGuard

SorobanGuard/Guard-CLI

1 stars 36 forks 1 watchers Rust
View on GitHub
100 Open Issues Need Help Last updated: Jun 29, 2026

Open Issues Need Help

View All on GitHub
`docs/checks.md` has no section for `missing-ttl-extension`, despite closed issue #145 claiming it was added 23 days ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
[CRITICAL] [build] Root `Cargo.toml` is missing `workspace.package` fields referenced by every crate 23 days ago
bug good first issue Stellar Wave critical
SorobanGuard/Guard-CLI
1

Rust
Document `missing-nonce` in `docs/checks.md` 23 days ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
`panic-in-contract` does not flag `todo!()` / `unimplemented!()` 24 days ago
enhancement good first issue Stellar Wave checks-crate points: 200
SorobanGuard/Guard-CLI
1

Rust
`forbidden-std-imports` activation gate misses contracts that use only `#[soroban_sdk::contract]` / `#[soroban_sdk::contractimpl]` 24 days ago
bug good first issue Stellar Wave checks-crate points: 200
SorobanGuard/Guard-CLI
1

Rust
`missing-nonce`: `contains_address_param` uses `path.is_ident("Address")`, missing fully-qualified `soroban_sdk::Address` 24 days ago
bug good first issue Stellar Wave checks-crate points: 200
SorobanGuard/Guard-CLI
1

Rust
`global_state.rs` reimplements `is_cfg_test` with the same `#[cfg(all(test, ...))]` blind spot as #397 24 days ago
bug good first issue Stellar Wave checks-crate points: 200
SorobanGuard/Guard-CLI
1

Rust
`missing-input-length-bound` flags fixed-size `BytesN<N>` parameters 24 days ago
bug good first issue Stellar Wave checks-crate points: 200
SorobanGuard/Guard-CLI
1

Rust
`scan`: `--fail-on` silently accepts unknown values and falls back to `high`, unlike `--disable-check` 24 days ago
bug good first issue Stellar Wave cli-crate points: 200
SorobanGuard/Guard-CLI
1

Rust
`symbol-key-collision` finding text says "found at position {column}" with no line number 25 days ago
bug good first issue Stellar Wave checks-crate points: 200
SorobanGuard/Guard-CLI
1

Rust
`re-initialization-risk` only treats `.set()` as a storage write, missing `remove` / `update` / `append` 25 days ago
bug good first issue Stellar Wave checks-crate points: 200
SorobanGuard/Guard-CLI
1

Rust
`unsafe-cross-contract-input` only matches `invoke_contract`, not `invoke_contract_check` / `try_invoke_contract` 25 days ago
bug good first issue Stellar Wave checks-crate points: 200
SorobanGuard/Guard-CLI
1

Rust
`unchecked-invoke-return` flags `let _ = env.invoke_contract(...)?;` with a rationale that `?` disproves 25 days ago
bug good first issue Stellar Wave checks-crate points: 200
SorobanGuard/Guard-CLI
1

Rust
`unsafe-storage-patterns`: `Symbol::new` detection requires exactly two path segments, missing `soroban_sdk::Symbol::new` 25 days ago
bug good first issue Stellar Wave checks-crate points: 200
SorobanGuard/Guard-CLI
1

Rust
Compound-assignment operators bypass the literal-operand exemption in `unchecked-arithmetic` and `integer-division-truncation` 25 days ago
bug good first issue Stellar Wave checks-crate points: 200
SorobanGuard/Guard-CLI
1

Rust
`missing-zero-address-check`: `unwrap_or_default()` in the body silently suppresses the finding 25 days ago
bug good first issue Stellar Wave checks-crate points: 200
SorobanGuard/Guard-CLI
1

Rust
`reentrancy-risk`: `extend_ttl` / `bump` count as the "storage write" that opens the reentrancy window 25 days ago
bug good first issue Stellar Wave checks-crate points: 200
SorobanGuard/Guard-CLI
1

Rust
`unchecked-divisor` runs on every `impl` block — no `#[contractimpl]` filter and no test exclusion 25 days ago
bug good first issue Stellar Wave checks-crate points: 200
SorobanGuard/Guard-CLI
1

Rust
14 of 34 checks emit `rule_url: None` despite having a `docs/checks.md` section 26 days ago
bug good first issue Stellar Wave checks-crate
SorobanGuard/Guard-CLI
1

Rust
`--quiet` help text says "zero High findings" but the gate is actually `--fail-on` 26 days ago
documentation good first issue Stellar Wave cli-crate
SorobanGuard/Guard-CLI
1

Rust
`describe_check` reports `uninitialized-storage-read` as medium, but the check emits `Severity::High` 26 days ago
bug good first issue Stellar Wave cli-crate
SorobanGuard/Guard-CLI
1

Rust
Glob compilation and matching are copy-pasted three times in `crates/analyzer/src/lib.rs` 26 days ago
enhancement good first issue Stellar Wave analyzer-crate
SorobanGuard/Guard-CLI
1

Rust
`missing-balance-check`'s `BodyScan::balance_line` is assigned but never read 26 days ago
bug good first issue Stellar Wave checks-crate dead-code
SorobanGuard/Guard-CLI
1

Rust
`overflow.rs`'s `rule_url` anchor `#unchecked-arithmetic` doesn't match the heading GitHub generates 26 days ago
bug documentation good first issue Stellar Wave checks-crate
SorobanGuard/Guard-CLI
1

Rust
Seven unused imports in `crates/checks` will fail CI's `cargo clippy -- -D warnings` 26 days ago
bug good first issue Stellar Wave checks-crate ci
SorobanGuard/Guard-CLI
1

Rust
Four near-identical `receiver_chain_contains_*` helpers in `util.rs` duplicate the same traversal 26 days ago
enhancement good first issue Stellar Wave checks-crate
SorobanGuard/Guard-CLI
1

Rust
`missing-zero-address-check`'s `SENSITIVE_NAMES` requires an exact function-name match — no prefix/substring matching 26 days ago
enhancement good first issue Stellar Wave checks-crate
SorobanGuard/Guard-CLI
1

Rust
`render_markdown` omits `description`, `suggestion`, and `rule_url` — the PR-comment format carries the least information 26 days ago
enhancement good first issue Stellar Wave cli-crate
SorobanGuard/Guard-CLI
1

Rust
`crates/checks/src/util.rs` doc comment above `is_cfg_test` describes a different function 27 days ago
documentation good first issue Stellar Wave checks-crate
SorobanGuard/Guard-CLI
1

Rust
`--json` summary omits `files_skipped`, so consumers cannot tell a full scan from a partial one 27 days ago
enhancement good first issue Stellar Wave cli-crate
SorobanGuard/Guard-CLI
1

Rust
`run_scan` repeats the same serialize-write-or-print block three times for `--json`, `--sarif`, and `--markdown` 27 days ago
enhancement good first issue Stellar Wave cli-crate
SorobanGuard/Guard-CLI
1

Rust
Document `missing-input-length-bound` in `docs/checks.md` 28 days ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Document `large-loop` in `docs/checks.md` 28 days ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Document `auth-after-storage-write` in `docs/checks.md` 28 days ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
`CHANGELOG.md`'s `[Unreleased]` section is badly out of date about 2 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Document `unprotected-token-mint` in `docs/checks.md` about 2 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Document `missing-ttl-extension` in `docs/checks.md` about 2 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Document `unchecked-token-amount` in `docs/checks.md` about 2 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Document `uninitialized-storage-read` in `docs/checks.md` about 2 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Document `missing-event-for-admin-change` in `docs/checks.md` about 2 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Document `unprotected-contract-deployment` in `docs/checks.md` about 2 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Document `unprotected-upgrade` in `docs/checks.md` about 2 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add test fixtures for `forbidden-std-imports` check (safe + vulnerable crates) about 2 months ago
good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add a demo contract in `examples/` that triggers all built-in checks about 2 months ago
documentation help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `docs/checks.md` section for `forbidden-std-imports` check about 2 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `docs/checks.md` section for `missing-ttl-extension` check about 2 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add test fixtures for `self-transfer` check (safe + vulnerable crates) about 2 months ago
good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add test fixtures for `symbol-key-collision` check (safe + vulnerable crates) about 2 months ago
good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `docs/checks.md` section for `hardcoded-address` check 3 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `docs/checks.md` section for `panic-in-contract` check 3 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `docs/checks.md` section for `reentrancy-risk` check 3 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add CI/license/edition badges to README 3 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `docs/checks.md` section for `mutable-global-state` check 3 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add comparison table to README: soroban-guard vs `clippy` and `cargo-audit` 3 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
CLI: add explicit `--no-color` flag as complement to `NO_COLOR` env var 3 months ago
enhancement good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `docs/false-positives.md` guide on suppressing findings 3 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Document the `Finding` JSON output schema in docs/ 3 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add SECURITY.md with responsible disclosure policy 3 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
analyzer: validate unique check names in `default_checks()` at startup 3 months ago
enhancement good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
analyzer: add `group_by_severity()` helper to group findings by severity 3 months ago
enhancement good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
analyzer: add `group_by_file()` helper to group findings by file path 3 months ago
enhancement good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
analyzer: skip auto-generated files (`// @generated` header) 3 months ago
enhancement good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Extend `describe_check()` and `describe_rule()` to cover all registered check names 3 months ago
enhancement good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `--fail-on-any` flag to exit non-zero for any severity finding 3 months ago
enhancement good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
CLI: colorize `check_name` column in pretty-print output by severity 3 months ago
enhancement good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `--verbose` / `-v` flag to print each scanned file path 3 months ago
enhancement good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `missing-contract-annotation` test fixtures 3 months ago
good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add test fixtures for `hardcoded-address` check (safe + vulnerable crates) 3 months ago
good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add test fixtures for `missing-ttl-extension` check (safe + vulnerable crates) 3 months ago
good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Register `mutable-global-state` check in `default_checks()` 3 months ago
bug help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add test fixtures for `unsafe-cross-contract-input` check (safe + vulnerable crates) 3 months ago
good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `unprotected-upgrade` check — detect upgrade/migrate entrypoints without auth gate 3 months ago
enhancement help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `unchecked-token-amount` check — detect token transfer calls where amount is not validated > 0 3 months ago
enhancement help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `missing-nonce` check — detect state-mutating functions without replay protection 3 months ago
enhancement help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Register `reentrancy-risk` check in `default_checks()` 3 months ago
bug help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `missing-event-for-admin-change` check — detect admin/owner changes without event emission 3 months ago
enhancement help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `unprotected-token-mint` check — detect `mint`/`burn` entrypoints without auth gate 3 months ago
enhancement help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `unprotected-contract-deployment` check — detect contract deployment patterns without auth 3 months ago
enhancement help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Register `panic-in-contract` check in `default_checks()` 3 months ago
bug help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `unsafe-randomness` check — detect use of ledger timestamp/sequence as randomness source 3 months ago
enhancement help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `missing-input-length-bound` check — detect `Bytes`/`Vec` parameters without length validation 3 months ago
enhancement help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `large-loop` check — detect unbounded loops in `#[contractimpl]` methods 3 months ago
enhancement help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `unchecked-divisor` check — detect integer divisions where divisor is not validated > 0 3 months ago
enhancement help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `missing-balance-check` check 3 months ago
enhancement help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `unbounded-vec-growth` check 3 months ago
enhancement help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `auth-after-storage-write` check 3 months ago
enhancement help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
CLI: print a warning when no `.rs` files are found in the scanned path 3 months ago
enhancement good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `docs/checks.md` sections for unregistered checks (delegate, events, key-collision, transfer) 3 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `unchecked-invoke-return` check 3 months ago
enhancement help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `re-initialization-risk` check 3 months ago
enhancement help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Register `transfer` check in `default_checks()` 3 months ago
bug help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Register `key-collision` check in `default_checks()` 3 months ago
bug help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Register `missing-event-emission` check in `default_checks()` 3 months ago
bug help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Register `delegate-call-risk` check in `default_checks()` 3 months ago
bug help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
analyzer: add `ScanError::PermissionDenied` variant, skip unreadable files 3 months ago
help wanted Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add test fixtures for `delegate-call-risk` check 3 months ago
good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add test fixtures for `missing-event-emission` check 3 months ago
good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Sort findings by file path then line number in all output formats 3 months ago
enhancement good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `docs/architecture.md` describing crate boundaries and data flow 3 months ago
documentation good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust
Add `rule_url` field to all built-in `Finding` structs 3 months ago
enhancement good first issue Stellar Wave
SorobanGuard/Guard-CLI
1

Rust