-
Notifications
You must be signed in to change notification settings - Fork 0
Pull requests: sealedsecurity/seal
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
fix(seal-sandbox): mask escaped symlink targets fail-closed under wide baselines; link-path grant is sole opt-out (SEA-784)
#533
opened Jun 11, 2026 by
mattwilkinsonn
Contributor
Loading…
fix(command_run): reject phantom tail_limit/head_limit param-name tokens before permission gate (SEA-766)
#529
opened Jun 11, 2026 by
mattwilkinsonn
Contributor
Loading…
build(deps): bump taiki-e/install-action from 2.81.1 to 2.81.7
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#516
opened Jun 11, 2026 by
dependabot
Bot
Loading…
refactor(seal-sandbox): replace gh_dbus_disabled bool with dbus_filter_rules presence check (SEA-780)
#514
opened Jun 11, 2026 by
mattwilkinsonn
Contributor
Loading…
feat(sandbox): add D-Bus filtered-proxy path for gh + coderabbit bundles; degrade gracefully when xdg-dbus-proxy absent (SEA-780)
#513
opened Jun 11, 2026 by
mattwilkinsonn
Contributor
Loading…
feat(seal-runtime): per-spawn xdg-dbus-proxy bridge binding filtered session bus into bwrap namespace (SEA-780)
#512
opened Jun 11, 2026 by
mattwilkinsonn
Contributor
Loading…
feat(seal-policy): add DbusFilterRule typed D-Bus filter rules + dbus_filter field on BundleSpec/GrantToolEntry/KernelParams (SEA-780 slice 1)
#511
opened Jun 11, 2026 by
mattwilkinsonn
Contributor
Loading…
fix: fix copy of wrapped codeblock cutting off post-wrap line
#508
opened Jun 10, 2026 by
fluxdiv
Collaborator
Loading…
build(deps): bump actions/checkout from 6.0.2 to 6.0.3
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#496
opened Jun 8, 2026 by
dependabot
Bot
Loading…
docs(ci): add .buildkite/ scaffold + Buildkite setup runbook
#486
opened Jun 6, 2026 by
mattwilkinsonn
Contributor
Loading…
fix(seal-policy): extend
dbus_disabled marker to coderabbit bundle + add us.i.posthog.com to coderabbit network grants (SEA-769)
#484
opened Jun 6, 2026 by
mattwilkinsonn
Contributor
Loading…
feat(seal-colony): v0 prototype — TUI + CLI + permissions + SQLite + Mode A push queue + e2e tests (SEA-700)
#407
opened May 30, 2026 by
mattwilkinsonn
Contributor
Loading…
build(deps): bump wasmtime-wasi from 44.0.2 to 45.0.1
dependencies
Pull requests that update a dependency file
rust
Pull requests that update rust code
#362
opened May 27, 2026 by
dependabot
Bot
Loading…
build(deps): bump wasmtime from 44.0.2 to 45.0.1
dependencies
Pull requests that update a dependency file
rust
Pull requests that update rust code
#361
opened May 27, 2026 by
dependabot
Bot
Loading…
feat(policy,sandbox): yabai + skhd bundles + unix_socket_connects primitive (SEA-636)
#349
opened May 26, 2026 by
mattwilkinsonn
Contributor
Loading…
build(deps): bump withgraphite/graphite-ci-action from 26bc0dcdeaba101794931d67a464ecbb21a76a8b to 9bc969adfd43bb790da3b64b543c78c75cef9689
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#324
opened May 25, 2026 by
dependabot
Bot
Loading…
ProTip!
Mix and match filters to narrow down what you’re looking for.