-
Notifications
You must be signed in to change notification settings - Fork 418
Pull requests: anthropic-experimental/sandbox-runtime
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Keep the default write paths out of a read-denied directory
#506
opened Aug 29, 2026 by
ronleizrowice-ant
Contributor
Loading…
linux: drop a root caller's capabilities in both sandbox modes
#505
opened Aug 29, 2026 by
ronleizrowice-ant
Contributor
Loading…
linux: pass an over-long bwrap profile through --args
#504
opened Aug 29, 2026 by
ronleizrowice-ant
Contributor
Loading…
linux: collapse a read-deny glob's expansion to its covering directories
#503
opened Aug 29, 2026 by
ronleizrowice-ant
Contributor
Loading…
linux: skip write-deny binds already covered by a read-only denied directory
#502
opened Aug 29, 2026 by
ronleizrowice-ant
Contributor
Loading…
cli: let srt exit after the command when --control-fd is a pipe
#501
opened Aug 29, 2026 by
ronleizrowice-ant
Contributor
Loading…
fix(linux): skip creating host stubs for non-existent deny paths
#495
opened Aug 24, 2026 by
gwatkins-arista
Loading…
deps: floor brace-expansion (npm)
sec:dep-vuln-fix
#488
opened Aug 22, 2026 by
jason-anthropic
Loading…
Windows: recompute deny set per exec and pin .git ancestor chain
#486
opened Aug 21, 2026 by
ant-kurt
Collaborator
Loading…
Linux: pin ancestor directories of deny binds against rename
#485
opened Aug 21, 2026 by
ant-kurt
Collaborator
Loading…
macOS: pin mandatory-deny directories at any depth
#484
opened Aug 21, 2026 by
ant-kurt
Collaborator
Loading…
fix(macOS): authenticate Git SSH SOCKS proxy connections
#482
opened Aug 19, 2026 by
Kaylebor
Loading…
fix(macos): grant the inherited terminals so sandboxed TUIs can enter raw mode
#480
opened Aug 16, 2026 by
pcontrerasp
Loading…
fix(seccomp): retry unshare(CLONE_NEWUSER) on EINVAL from a non-empty thread group
#479
opened Aug 15, 2026 by
Xiaokebuyu
Loading…
fix(windows): keep the proxy auth token off srt-win exec's command line
#478
opened Aug 15, 2026 by
ig-ant
Collaborator
Loading…
fix: Windows env-var deny/mask matching must fold name case
#477
opened Aug 15, 2026 by
ig-ant
Collaborator
Loading…
feat(windows): bounded per-init world-writable directory audit
#476
opened Aug 14, 2026 by
ig-ant
Collaborator
Loading…
fix(windows): lock reparse points traversed by deny-path spellings
#475
opened Aug 14, 2026 by
ig-ant
Collaborator
Loading…
feat: deny read of SSH key material referenced by the user's ssh config
#474
opened Aug 14, 2026 by
ig-ant
Collaborator
Loading…
ci: raise smoke-kill's Assert-Gone ceiling for slow runners
#469
opened Aug 13, 2026 by
ig-ant
Collaborator
Loading…
Previous Next
ProTip!
Exclude everything labeled
bug with -label:bug.