-
Notifications
You must be signed in to change notification settings - Fork 420
Pull requests: anthropics/sandbox-runtime
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
fix(macos): authenticate git-over-ssh through the sandbox proxy
#516
opened Sep 4, 2026 by
cblecker
Loading…
Mandatory denies: nested repo hooks at scan depth, submodule git dirs, .git pointer files, gitignored paths
#515
opened Sep 2, 2026 by
ronleizrowice-ant
Contributor
Loading…
Linux: pin ancestor directories of deny binds against rename
#514
opened Sep 2, 2026 by
ronleizrowice-ant
Contributor
Loading…
Support per-path unix socket allowlisting on Linux
#510
opened Aug 31, 2026 by
shawnm-anthropic
Collaborator
Loading…
feat(linux): allow the host to reach specific sandboxed loopback ports (network.exposeLoopbackPorts)
#507
opened Aug 30, 2026 by
tbrandenburg
Loading…
Keep the default write paths out of a read-denied directory
#506
opened Aug 29, 2026 by
ronleizrowice-ant
Contributor
Loading…
linux: pass an over-long bwrap profile through --args
#504
opened Aug 29, 2026 by
ronleizrowice-ant
Contributor
Loading…
linux: collapse a read-deny glob's expansion to its covering directories
#503
opened Aug 29, 2026 by
ronleizrowice-ant
Contributor
Loading…
fix(linux): skip creating host stubs for non-existent deny paths
#495
opened Aug 24, 2026 by
gwatkins-arista
Loading…
deps: floor brace-expansion (npm)
sec:dep-vuln-fix
#488
opened Aug 22, 2026 by
jason-anthropic
Loading…
Windows: recompute deny set per exec and pin .git ancestor chain
#486
opened Aug 21, 2026 by
ant-kurt
Collaborator
Loading…
Linux: pin ancestor directories of deny binds against rename
#485
opened Aug 21, 2026 by
ant-kurt
Collaborator
Loading…
macOS: pin mandatory-deny directories at any depth
#484
opened Aug 21, 2026 by
ant-kurt
Collaborator
Loading…
fix(macOS): authenticate Git SSH SOCKS proxy connections
#482
opened Aug 19, 2026 by
Kaylebor
Loading…
fix(macos): grant the inherited terminals so sandboxed TUIs can enter raw mode
#480
opened Aug 16, 2026 by
pcontrerasp
Loading…
fix(seccomp): retry unshare(CLONE_NEWUSER) on EINVAL from a non-empty thread group
#479
opened Aug 15, 2026 by
Xiaokebuyu
Loading…
fix(windows): keep the proxy auth token off srt-win exec's command line
#478
opened Aug 15, 2026 by
ig-ant
Collaborator
Loading…
fix: Windows env-var deny/mask matching must fold name case
#477
opened Aug 15, 2026 by
ig-ant
Collaborator
Loading…
feat(windows): bounded per-init world-writable directory audit
#476
opened Aug 14, 2026 by
ig-ant
Collaborator
Loading…
fix(windows): lock reparse points traversed by deny-path spellings
#475
opened Aug 14, 2026 by
ig-ant
Collaborator
Loading…
feat: deny read of SSH key material referenced by the user's ssh config
#474
opened Aug 14, 2026 by
ig-ant
Collaborator
Loading…
Previous Next
ProTip!
Add no:assignee to see everything that’s not assigned.