-
Notifications
You must be signed in to change notification settings - Fork 418
Pull requests: anthropics/sandbox-runtime
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Mandatory denies: nested repo hooks at scan depth, submodule git dirs, .git pointer files, gitignored paths
#515
opened Sep 2, 2026 by
ronleizrowice-ant
Contributor
Loading…
Linux: pin ancestor directories of deny binds against rename
#514
opened Sep 2, 2026 by
ronleizrowice-ant
Contributor
Loading…
Sanitize an unregistered attribution key in every violation producer
#513
opened Sep 2, 2026 by
ronleizrowice-ant
Contributor
Loading…
Support per-path unix socket allowlisting on Linux
#510
opened Aug 31, 2026 by
shawnm-anthropic
Collaborator
Loading…
feat(linux): allow the host to reach specific sandboxed loopback ports (network.exposeLoopbackPorts)
#507
opened Aug 30, 2026 by
tbrandenburg
Loading…
Keep the default write paths out of a read-denied directory
#506
opened Aug 29, 2026 by
ronleizrowice-ant
Contributor
Loading…
linux: drop a root caller's capabilities in both sandbox modes
#505
opened Aug 29, 2026 by
ronleizrowice-ant
Contributor
Loading…
linux: pass an over-long bwrap profile through --args
#504
opened Aug 29, 2026 by
ronleizrowice-ant
Contributor
Loading…
linux: collapse a read-deny glob's expansion to its covering directories
#503
opened Aug 29, 2026 by
ronleizrowice-ant
Contributor
Loading…
linux: skip write-deny binds already covered by a read-only denied directory
#502
opened Aug 29, 2026 by
ronleizrowice-ant
Contributor
Loading…
cli: let srt exit after the command when --control-fd is a pipe
#501
opened Aug 29, 2026 by
ronleizrowice-ant
Contributor
Loading…
fix(linux): skip creating host stubs for non-existent deny paths
#495
opened Aug 24, 2026 by
gwatkins-arista
Loading…
deps: floor brace-expansion (npm)
sec:dep-vuln-fix
#488
opened Aug 22, 2026 by
jason-anthropic
Loading…
Windows: recompute deny set per exec and pin .git ancestor chain
#486
opened Aug 21, 2026 by
ant-kurt
Collaborator
Loading…
Linux: pin ancestor directories of deny binds against rename
#485
opened Aug 21, 2026 by
ant-kurt
Collaborator
Loading…
macOS: pin mandatory-deny directories at any depth
#484
opened Aug 21, 2026 by
ant-kurt
Collaborator
Loading…
fix(macOS): authenticate Git SSH SOCKS proxy connections
#482
opened Aug 19, 2026 by
Kaylebor
Loading…
fix(macos): grant the inherited terminals so sandboxed TUIs can enter raw mode
#480
opened Aug 16, 2026 by
pcontrerasp
Loading…
fix(seccomp): retry unshare(CLONE_NEWUSER) on EINVAL from a non-empty thread group
#479
opened Aug 15, 2026 by
Xiaokebuyu
Loading…
fix(windows): keep the proxy auth token off srt-win exec's command line
#478
opened Aug 15, 2026 by
ig-ant
Collaborator
Loading…
fix: Windows env-var deny/mask matching must fold name case
#477
opened Aug 15, 2026 by
ig-ant
Collaborator
Loading…
Previous Next
ProTip!
Updated in the last three days: updated:>2026-08-31.