Issues

• Root .gitignore ignores .vscode/ yet .vscode/settings.json is tracked; tool outputs are not ignored

  enhancementgood first issuehelp wantedinfrastructure
  Trellis-Ecosystem/trellis#704 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  2

• cliff.toml lacks parsers for build, security and style commits, and CHANGELOG.md has a bogus Ix group

  bughelp wantedinfrastructure
  Trellis-Ecosystem/trellis#703 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  2

• AUDIT.md (dated 2026-07-30) lists 69 findings with no status, including long-fixed ones such as C-1 and C-6

  documentationhelp wanted
  Trellis-Ecosystem/trellis#702 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  1

• SECURITY.md points reporters to github.com/trellisorg/trellis, a nonexistent repo, for the PGP fingerprint

  documentationgood first issuehelp wanted
  Trellis-Ecosystem/trellis#701 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  1

• README Project Status is stale: 51 tests (actual 83), 8 vs 9 CLI commands, 12 hooks (actual 10)

  documentationgood first issuehelp wanted
  Trellis-Ecosystem/trellis#700 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  1

• make lint runs weaker clippy than CI and skips fmt and typecheck, so a green local lint can fail CI

  bughelp wantedinfrastructure
  Trellis-Ecosystem/trellis#699 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  1

• Pre-commit fallback secret scan greps removed lines and diff headers, so deleting a leaked secret is blocked

  buggood first issuehelp wantedinfrastructure
  Trellis-Ecosystem/trellis#698 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  1

• reset-testnet.sh runs init signed by the deployer instead of the payer and without --yes

  bughelp wantedinfrastructure
  Trellis-Ecosystem/trellis#697 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  1

• Dependabot never bumps rust-toolchain.toml: the cargo entry does not cover it and no other entry exists

  bughelp wantedinfrastructure
  Trellis-Ecosystem/trellis#696 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026

• npm-audit docs promise an allowlist and .npmrc suppression, but .audit-allowlist.json is read by nothing

  bughelp wantedinfrastructure
  Trellis-Ecosystem/trellis#695 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  1

• Two of four Semgrep Soroban rules can never match: a pub(crate) SDK fn and an unused panic!

  bughelp wantedinfrastructure
  Trellis-Ecosystem/trellis#694 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  1

• Secret scanning has no rule for Stellar secret seeds (S...), the credential TRELLIS_SOURCE_KEY accepts

  help wantedinfrastructuresecurity
  Trellis-Ecosystem/trellis#693 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026

• No CI job runs gitleaks, although .gitleaks.toml exists and CONTRIBUTING says CI catches what the hook skips

  help wantedinfrastructuresecurity
  Trellis-Ecosystem/trellis#692 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  1

• Contract CI path filters omit tests/**, rust-toolchain.toml and .semgrep/**, so edits there skip CI

  bughelp wantedinfrastructure
  Trellis-Ecosystem/trellis#691 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  2

• All workflows use ubuntu-latest, which GitHub is migrating to Ubuntu 26 on 2026-10-19; pin a runner image

  enhancementhelp wantedinfrastructure
  Trellis-Ecosystem/trellis#690 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  1

• Only one of nine workflows sets timeout-minutes; a hung devnet or mutation job runs for 6 hours

  enhancementhelp wantedinfrastructure
  Trellis-Ecosystem/trellis#689 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  2

• Release workflow's dry_run rehearsal still pushes a regenerated CHANGELOG.md to the default branch

  bughelp wantedinfrastructure
  Trellis-Ecosystem/trellis#688 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  1

• compare_gas_costs.py documents --threshold 10 but only takes a bare positional and crashes on bad JSON

  buggood first issuehelp wantedinfrastructure
  Trellis-Ecosystem/trellis#687 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  1

• Advanced Testing CLI matrix cancels macOS/Windows legs on first failure and test-summary ignores two jobs

  bughelp wantedinfrastructure
  Trellis-Ecosystem/trellis#686 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  1

• Bug report template does not ask for trellis --version, stellar --version, contract ID or transaction hash

  enhancementgood first issuehelp wantedinfrastructure
  Trellis-Ecosystem/trellis#685 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  1

• Weekly Cargo Audit workflow fails at cargo install cargo-audit because rust-toolchain.toml pins 1.86.0

  bughelp wantedinfrastructure
  Trellis-Ecosystem/trellis#684 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  1

• CodeQL workflow is invalid: workflow-level concurrency uses matrix.language, so no job ever starts

  bughelp wantedinfrastructure
  Trellis-Ecosystem/trellis#683 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  1

• frontend/README.md omits the E2E suite: no test:e2e script row, no E2E_* env vars, no pointer to tests/e2e

  documentationfrontendgood first issuehelp wanted
  Trellis-Ecosystem/trellis#682 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  1

• AgreementDetail links the 64-hex agreement id to a Stellar Expert contract page that does not exist

  bugfrontendgood first issuehelp wanted
  Trellis-Ecosystem/trellis#681 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  1

• index.html has no meta description, Open Graph tags or theme-color, and routes never update document.title

  enhancementfrontendgood first issuehelp wanted
  Trellis-Ecosystem/trellis#680 · Filter by author ALLEN-AYODEJI opened on Oct 15, 2026
  1