Skip to content

Actions: anthropics/sandbox-runtime

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows
1,713 workflow runs
1,713 workflow runs

Filter by Workflow

⌥ + click/return to exclude

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
proxy: forward pipelined TLS-terminated requests in the order the client sent them Tests #1804: Pull request #609 opened by iamhuman-cheolheelee
Action required iamhuman-cheolheelee:fix/tls-terminate-pipeline-order
iamhuman-cheolheelee:fix/tls-terminate-pipeline-order
Action required
linux: the read-deny glob walk has a budget Tests #1803: Pull request #607 synchronize by ronleizrowice-ant
9m 36s fix/linux-read-deny-glob-bound
fix/linux-read-deny-glob-bound
9m 36s
feat(linux): allow the host to reach specific sandboxed loopback ports (network.exposeLoopbackPorts) Tests #1802: Pull request #507 synchronize by tbrandenburg
Action required tbrandenburg:feat/linux-expose-loopback-ports
tbrandenburg:feat/linux-expose-loopback-ports
Action required
linux: the read-deny glob walk has a budget Tests #1801: Pull request #607 synchronize by ronleizrowice-ant
8m 55s fix/linux-read-deny-glob-bound
fix/linux-read-deny-glob-bound
8m 55s
Read a caller's path as a path where it exists, and let a caller mark one Tests #1800: Pull request #608 opened by ronleizrowice-ant
8m 51s fix/literal-path-entries
fix/literal-path-entries
8m 51s
linux: the read-deny glob walk has a budget Tests #1799: Pull request #607 synchronize by ronleizrowice-ant
8m 11s fix/linux-read-deny-glob-bound
fix/linux-read-deny-glob-bound
8m 11s
linux: the read-deny glob walk has a budget Tests #1798: Pull request #607 synchronize by ronleizrowice-ant
8m 2s fix/linux-read-deny-glob-bound
fix/linux-read-deny-glob-bound
8m 2s
linux: the read-deny glob walk has a budget Tests #1797: Pull request #607 opened by ronleizrowice-ant
9m 25s fix/linux-read-deny-glob-bound
fix/linux-read-deny-glob-bound
9m 25s
feat(network): add allowAllDomains flag to bypass allowlist Tests #1796: Pull request #283 synchronize by smolyn
Action required ubc:gs/allow-all-domains
ubc:gs/allow-all-domains
Action required
fix(macos): auth-capable GIT_SSH_COMMAND via socat when present Tests #1795: Pull request #452 synchronize by smolyn
Action required ubc:gs/macos-socat-git-ssh
ubc:gs/macos-socat-git-ssh
Action required
fix(macos): allow the com.apple.netsrc kernel control under network restriction Tests #1794: Pull request #604 opened by v0ropaev
Action required v0ropaev:macos-netsrc-kernel-control
v0ropaev:macos-netsrc-kernel-control
Action required
cli: --violations writes each recorded violation to a file Tests #1793: Pull request #601 synchronize by carlostapiacl
Action required carlostapiacl:cli-violations-flag
carlostapiacl:cli-violations-flag
Action required
fix(windows): keep the proxy auth token off srt-win exec's command line Tests #1792: Pull request #478 synchronize by ig-ant
12m 20s ig/windows-proxy-token-pipe
ig/windows-proxy-token-pipe
12m 20s
fix(windows): lock reparse points traversed by deny-path spellings Tests #1791: Pull request #475 synchronize by ig-ant
8m 15s ig/deny-alias-stamp-test
ig/deny-alias-stamp-test
8m 15s
cli: --violations writes each recorded violation to a file Tests #1790: Pull request #601 opened by carlostapiacl
Action required carlostapiacl:cli-violations-flag
carlostapiacl:cli-violations-flag
Action required
fix: Windows env-var deny/mask matching must fold name case Tests #1789: Pull request #477 synchronize by ig-ant
9m 34s ig/windows-env-deny-case-fold
ig/windows-env-deny-case-fold
9m 34s
feat(windows): bounded per-init world-writable directory audit Tests #1788: Pull request #476 synchronize by ig-ant
10m 28s ig/windows-worldwritable-audit
ig/windows-worldwritable-audit
10m 28s
feat: deny read of SSH key material referenced by the user's ssh config Tests #1787: Pull request #474 synchronize by ig-ant
8m 12s ig/ssh-config-read-exclusions
ig/ssh-config-read-exclusions
8m 12s
feat(macos): allowMachRegister, so Chromium can check in its Mach ports Tests #1786: Pull request #598 synchronize by v0ropaev
Action required v0ropaev:feat/allow-mach-register
v0ropaev:feat/allow-mach-register
Action required
fix(macos): canonicalize system symlink roots Tests #1785: Pull request #600 opened by sylvesterkaczmarek
Action required sylvesterkaczmarek:fix/macos-system-symlink-roots
sylvesterkaczmarek:fix/macos-system-symlink-roots
Action required
feat(macos): allowMachRegister, so Chromium can check in its Mach ports Tests #1784: Pull request #598 opened by v0ropaev
-1s v0ropaev:feat/allow-mach-register
v0ropaev:feat/allow-mach-register
-1s
proxy: tell the sandboxed client which policy denied its connection Tests #1783: Pull request #597 opened by v0ropaev
-1s v0ropaev:fix/proxy-deny-reason-in-band
v0ropaev:fix/proxy-deny-reason-in-band
-1s
Take host-side helpers only from where the sandboxed command cannot write Tests #1782: Pull request #594 synchronize by ronleizrowice-ant
8m 40s fix/host-helpers-from-trusted-paths
fix/host-helpers-from-trusted-paths
8m 40s
Take host-side helpers only from where the sandboxed command cannot write Tests #1781: Pull request #594 synchronize by ronleizrowice-ant
9m 26s fix/host-helpers-from-trusted-paths
fix/host-helpers-from-trusted-paths
9m 26s
Take host-side helpers only from where the sandboxed command cannot write Tests #1780: Pull request #594 synchronize by ronleizrowice-ant
8m 33s fix/host-helpers-from-trusted-paths
fix/host-helpers-from-trusted-paths
8m 33s