Skip to content

Actions: anthropics/sandbox-runtime

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows
1,428 workflow runs
1,428 workflow runs

Filter by Workflow

⌥ + click/return to exclude

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Bind the mux listeners exclusively so node cluster cannot share them Tests #1522: Pull request #520 opened by CedricConday
Action required CedricConday:fix/mux-listen-exclusive-under-cluster
CedricConday:fix/mux-listen-exclusive-under-cluster
Action required
fix(macos): preserve streamed sandbox violations Tests #1521: Pull request #519 opened by linhongyu510
Action required linhongyu510:fix/macos-violation-log-stream
linhongyu510:fix/macos-violation-log-stream
Action required
fix(sandbox): auto-deny dangerous paths and .git/hooks across all allowedWrite roots Tests #1520: Pull request #518 opened by connerkup
-1s connerkup:feat/deny-git-hooks-write
connerkup:feat/deny-git-hooks-write
-1s
config: reject unknown top-level keys in SandboxRuntimeConfigSchema Tests #1519: Pull request #517 opened by PranshulSoni
Action required PranshulSoni:fix/strict-top-level-config-schema
PranshulSoni:fix/strict-top-level-config-schema
Action required
feat(linux): allow the host to reach specific sandboxed loopback ports (network.exposeLoopbackPorts) Tests #1518: Pull request #507 synchronize by tbrandenburg
Action required tbrandenburg:feat/linux-expose-loopback-ports
tbrandenburg:feat/linux-expose-loopback-ports
Action required
fix(macos): authenticate git-over-ssh through the sandbox proxy Tests #1517: Pull request #516 synchronize by cblecker
Action required cblecker:fix/macos-git-ssh-proxy-auth
cblecker:fix/macos-git-ssh-proxy-auth
Action required
fix(macos): authenticate git-over-ssh through the sandbox proxy Tests #1516: Pull request #516 synchronize by cblecker
Action required cblecker:fix/macos-git-ssh-proxy-auth
cblecker:fix/macos-git-ssh-proxy-auth
Action required
fix(macos): authenticate git-over-ssh through the sandbox proxy Tests #1515: Pull request #516 opened by cblecker
Action required cblecker:fix/macos-git-ssh-proxy-auth
cblecker:fix/macos-git-ssh-proxy-auth
Action required
Sanitize an unregistered attribution key in every violation producer … Tests #1514: Commit 66d35e5 pushed by dylan-conway
9m 23s main
main
9m 23s
linux: skip write-deny binds already covered by a read-only denied di… Tests #1513: Commit 42e56d5 pushed by dylan-conway
11m 20s main
main
11m 20s
Sanitize an unregistered attribution key in every violation producer Tests #1512: Pull request #513 synchronize by dylan-conway
16m 10s ronleizrowice-ant:fix/sanitize-unregistered-violation-command
ronleizrowice-ant:fix/sanitize-unregistered-violation-command
16m 10s
linux: drop a root caller's capabilities in both sandbox modes (#505) Tests #1511: Commit e3ac597 pushed by dylan-conway
16m 25s main
main
16m 25s
linux: drop a root caller's capabilities in both sandbox modes Tests #1510: Pull request #505 synchronize by dylan-conway
12m 41s ronleizrowice-ant:fix/linux-weaker-root-caps
ronleizrowice-ant:fix/linux-weaker-root-caps
12m 41s
cli: let srt exit after the command when --control-fd is a pipe (#501) Tests #1509: Commit 7c3eb33 pushed by dylan-conway
16m 50s main
main
16m 50s
Merge pull request #512 from anthropics/shawnm/anthropics-org-urls Tests #1508: Commit 3d20bb2 pushed by shawnm-anthropic
8m 45s main
main
8m 45s
Mandatory denies: nested repo hooks at scan depth, submodule git dirs, .git pointer files, gitignored paths Tests #1507: Pull request #515 opened by ronleizrowice-ant
7m 46s ronleizrowice-ant:fix/linux-nested-repo-hooks-depth
ronleizrowice-ant:fix/linux-nested-repo-hooks-depth
7m 46s
linux: skip write-deny binds already covered by a read-only denied directory Tests #1506: Pull request #502 synchronize by ronleizrowice-ant
7m 48s ronleizrowice-ant:fix/linux-covered-write-deny-binds
ronleizrowice-ant:fix/linux-covered-write-deny-binds
7m 48s
linux: pass an over-long bwrap profile through --args Tests #1505: Pull request #504 synchronize by ronleizrowice-ant
7m 52s ronleizrowice-ant:fix/linux-bwrap-args-overflow
ronleizrowice-ant:fix/linux-bwrap-args-overflow
7m 52s
Keep the default write paths out of a read-denied directory Tests #1504: Pull request #506 synchronize by ronleizrowice-ant
7m 23s ronleizrowice-ant:fix/default-write-paths-under-denyread
ronleizrowice-ant:fix/default-write-paths-under-denyread
7m 23s
linux: drop a root caller's capabilities in both sandbox modes Tests #1503: Pull request #505 synchronize by ronleizrowice-ant
9m 9s ronleizrowice-ant:fix/linux-weaker-root-caps
ronleizrowice-ant:fix/linux-weaker-root-caps
9m 9s
linux: collapse a read-deny glob's expansion to its covering directories Tests #1502: Pull request #503 synchronize by ronleizrowice-ant
8m 19s ronleizrowice-ant:fix/linux-read-deny-glob-collapse
ronleizrowice-ant:fix/linux-read-deny-glob-collapse
8m 19s
Linux: pin ancestor directories of deny binds against rename Tests #1501: Pull request #514 opened by ronleizrowice-ant
8m 0s ronleizrowice-ant:ron/linux-ancestor-pin
ronleizrowice-ant:ron/linux-ancestor-pin
8m 0s
Sanitize an unregistered attribution key in every violation producer Tests #1500: Pull request #513 opened by ronleizrowice-ant
7m 37s ronleizrowice-ant:fix/sanitize-unregistered-violation-command
ronleizrowice-ant:fix/sanitize-unregistered-violation-command
7m 37s
Support per-path unix socket allowlisting on Linux Tests #1499: Pull request #510 synchronize by shawnm-anthropic
9m 24s shawnm/linux-allow-unix-sockets
shawnm/linux-allow-unix-sockets
9m 24s
v0.0.75 Release #39: Release v0.0.75 published by dylan-conway
2m 56s
2m 56s