oras-project

oras-project/oras-go

ORAS Go library

275 stars 113 forks 275 watchers Go Apache License 2.0

artifact container go oras registry

View on GitHub Website

16 Open Issues Need Help Last updated: Jul 30, 2026

Open Issues Need Help

View All on GitHub

Split credentials refactor out of #1225 into an independent PR 3 days ago

help wanted v3

oras-project/oras-go

275

ORAS Go library

Go

#artifact#container#go#oras#registry

ci: enable golangci-lint with a minimal linter set 4 days ago

good first issue help wanted v3

oras-project/oras-go

275

ORAS Go library

Go

#artifact#container#go#oras#registry

Forward-port GHSA-xf85-363p-868w (unvalidated bearer realm SSRF/TLS downgrade) to main (v3) 5 days ago

good first issue help wanted v3

oras-project/oras-go

275

ORAS Go library

Go

#artifact#container#go#oras#registry

Forward-port GHSA-vh4v-2xq2-g5cg (credentials forwarded across redirects) to main (v3) 5 days ago

good first issue help wanted v3

oras-project/oras-go

275

ORAS Go library

Go

#artifact#container#go#oras#registry

feat(remote): bound catalog listing with RepositoryListMaxPages 5 days ago

enhancement good first issue help wanted v3

oras-project/oras-go

275

ORAS Go library

Go

#artifact#container#go#oras#registry

Forward-port GHSA-jxpm-75mh-9fp7 blob-upload credential-leak fix (#1152) to main (v3) 5 days ago

good first issue help wanted v3

oras-project/oras-go

275

ORAS Go library

Go

#artifact#container#go#oras#registry

LoggingTransport leaks Cookie, Proxy-Authorization, and URL query strings in debug logs 5 days ago

good first issue help wanted v3

oras-project/oras-go

275

ORAS Go library

Go

#artifact#container#go#oras#registry

Validate caller-supplied config descriptor in Pack/PackManifest 6 days ago

good first issue help wanted v3

oras-project/oras-go

275

ORAS Go library

Go

#artifact#container#go#oras#registry

policyEnforcingRepository: gate Exists and document Delete/Tags/Referrers carve-outs (admission-over-content) 6 days ago

enhancement good first issue help wanted v3

oras-project/oras-go

275

ORAS Go library

Go

#artifact#container#go#oras#registry

check-license fails on .github/act/release-event.json (JSON has no comment syntax for a license header) 6 days ago

good first issue help wanted v3

oras-project/oras-go

275

ORAS Go library

Go

#artifact#container#go#oras#registry

Release workflow: unvalidated version interpolated into shell before semver check (command injection) 6 days ago

good first issue help wanted v3

oras-project/oras-go

275

ORAS Go library

Go

#artifact#container#go#oras#registry

Forward-port #1095 to main: graph.Memory should use digest as map key (GC can prune shared blobs) 7 days ago

good first issue help wanted v3

oras-project/oras-go

275

ORAS Go library

Go

#artifact#container#go#oras#registry

Cherry-pick GitOps PR-based release process to main 7 days ago

good first issue help wanted v3

oras-project/oras-go

275

ORAS Go library

Go

#artifact#container#go#oras#registry

Support timestamp clamping in file.Store tar packing for SOURCE_DATE_EPOCH reproducible builds 7 days ago

help wanted v3

oras-project/oras-go

275

ORAS Go library

Go

#artifact#container#go#oras#registry

ParseReference should ignore scheme(s) 6 months ago

good first issue

oras-project/oras-go

275

ORAS Go library

Go

#artifact#container#go#oras#registry

Several github workflows reference unused branch 7 months ago

good first issue

oras-project/oras-go

275

ORAS Go library

Go

#artifact#container#go#oras#registry