Skip to content

Actions: anthropics/sandbox-runtime

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows
1,702 workflow runs
1,702 workflow runs

Filter by Workflow

⌥ + click/return to exclude

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Mandatory denies: submodule git dirs, .git pointer files, nested hooks, gitignored paths Tests #1768: Pull request #569 synchronize by ronleizrowice-ant
8m 57s fix/linux-nested-repo-hooks-depth
fix/linux-nested-repo-hooks-depth
8m 57s
Glob walk: a drive-root base no longer drops the pattern, and three ways a failure could lose a match Tests #1767: Pull request #575 synchronize by ronleizrowice-ant
9m 26s fix/glob-walk-root-base-and-failures
fix/glob-walk-root-base-and-failures
9m 26s
globToRegex: negate bracket sets, and compile from tokens so no path text can become a wildcard Tests #1766: Pull request #573 synchronize by ronleizrowice-ant
9m 36s fix/glob-to-regex-negation-and-placeholders
fix/glob-to-regex-negation-and-placeholders
9m 36s
Mandatory denies: submodule git dirs, .git pointer files, nested hooks, gitignored paths Tests #1765: Pull request #569 synchronize by ronleizrowice-ant
9m 40s fix/linux-nested-repo-hooks-depth
fix/linux-nested-repo-hooks-depth
9m 40s
Mandatory denies: submodule git dirs, .git pointer files, nested hooks, gitignored paths Tests #1764: Pull request #569 synchronize by ronleizrowice-ant
8m 34s fix/linux-nested-repo-hooks-depth
fix/linux-nested-repo-hooks-depth
8m 34s
Glob walk: a drive-root base no longer drops the pattern, and three ways a failure could lose a match Tests #1763: Pull request #575 synchronize by ronleizrowice-ant
9m 27s fix/glob-walk-root-base-and-failures
fix/glob-walk-root-base-and-failures
9m 27s
linux: one mount per destination, so bubblewrap 0.4 starts Tests #1762: Pull request #580 synchronize by ronleizrowice-ant
7m 55s fix/linux-one-mount-per-destination
fix/linux-one-mount-per-destination
7m 55s
Per-command network allow lists, and deny reasons from the ask callback Tests #1761: Pull request #591 opened by ronleizrowice-ant
8m 57s feat/per-command-network-lists
feat/per-command-network-lists
8m 57s
linux: exit status under zsh, and import zod/v3 Tests #1760: Pull request #590 opened by ronleizrowice-ant
7m 27s fix/zsh-exit-status-and-zod-v3
fix/zsh-exit-status-and-zod-v3
7m 27s
ci: pin ripgrep, Node, type packages and actions, and raise engines to Node 22 Tests #1759: Pull request #589 opened by ronleizrowice-ant
9m 52s ci/pin-toolchain
ci/pin-toolchain
9m 52s
linux: a placeholder is removed only when no running sandbox relies on it Tests #1758: Pull request #584 synchronize by ronleizrowice-ant
8m 53s fix/linux-placeholder-liveness-lock
fix/linux-placeholder-liveness-lock
8m 53s
linux: a sandboxed command cannot make user namespaces of its own Tests #1757: Pull request #588 synchronize by ronleizrowice-ant
8m 26s fix/linux-no-nested-user-namespaces
fix/linux-no-nested-user-namespaces
8m 26s
linux: a sandboxed command cannot make user namespaces of its own Tests #1756: Pull request #588 synchronize by ronleizrowice-ant
9m 44s fix/linux-no-nested-user-namespaces
fix/linux-no-nested-user-namespaces
9m 44s
linux: a sandboxed command cannot make user namespaces of its own Tests #1755: Pull request #588 synchronize by ronleizrowice-ant
9m 26s fix/linux-no-nested-user-namespaces
fix/linux-no-nested-user-namespaces
9m 26s
linux: a sandboxed command cannot make user namespaces of its own Tests #1754: Pull request #588 synchronize by ronleizrowice-ant
9m 25s fix/linux-no-nested-user-namespaces
fix/linux-no-nested-user-namespaces
9m 25s
linux: a sandboxed command cannot make user namespaces of its own Tests #1753: Pull request #588 opened by ronleizrowice-ant
13m 16s fix/linux-no-nested-user-namespaces
fix/linux-no-nested-user-namespaces
13m 16s
test: fix the typecheck of the seccomp suite that broke main (#583) Tests #1752: Commit ddbeb74 pushed by ronleizrowice-ant
9m 49s main
main
9m 49s
Mandatory denies: submodule git dirs, .git pointer files, nested hooks, gitignored paths Tests #1751: Pull request #569 synchronize by ronleizrowice-ant
8m 30s fix/linux-nested-repo-hooks-depth
fix/linux-nested-repo-hooks-depth
8m 30s
Mandatory denies: submodule git dirs, .git pointer files, nested hooks, gitignored paths Tests #1750: Pull request #569 synchronize by ronleizrowice-ant
9m 44s fix/linux-nested-repo-hooks-depth
fix/linux-nested-repo-hooks-depth
9m 44s
fix(sandbox): deny writes to the loaded settings file within the allowed region Tests #1749: Pull request #587 opened by tech4242
-1s tech4242:harden-settings-file-deny
tech4242:harden-settings-file-deny
-1s
cli: write refused operations to --violations, and start the filesystem monitor for it Tests #1748: Pull request #586 opened by MatheusMartinho
Action required MatheusMartinho:cli-violations
MatheusMartinho:cli-violations
Action required
linux: a deny set's mounts do not depend on the order it was written in Tests #1747: Pull request #585 opened by ronleizrowice-ant
9m 18s fix/linux-deny-order-independence
fix/linux-deny-order-independence
9m 18s
linux: turn four comment-only invariants into code Tests #1746: Pull request #574 synchronize by ronleizrowice-ant
10m 28s refactor/structural-invariants
refactor/structural-invariants
10m 28s
linux: a placeholder is removed only when no running sandbox relies on it Tests #1745: Pull request #584 opened by ronleizrowice-ant
8m 43s fix/linux-placeholder-liveness-lock
fix/linux-placeholder-liveness-lock
8m 43s
test: fix the typecheck of the seccomp suite that broke main Tests #1744: Pull request #583 opened by ronleizrowice-ant
9m 40s fix/test-typecheck-seccomp-filter
fix/test-typecheck-seccomp-filter
9m 40s