Skip to content

Actions: google/nsjail

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows
208 workflow runs
208 workflow runs

Filter by Workflow

⌥ + click/return to exclude

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
net: seal inherited fds before executing pasta Docker #453: Pull request #297 opened by soul-sol
Action required soul-sol:harden-pasta-fd-inheritance
soul-sol:harden-pasta-fd-inheritance
Action required
net: seal inherited fds before executing pasta GitHub Actions Scan #30: Pull request #297 opened by soul-sol
7s
7s
Harden jail mounts, capabilities, and nstun networking defaults Docker #452: Pull request #296 opened by M0nd0R
Action required M0nd0R:harden-sandbox-nstun-defaults
M0nd0R:harden-sandbox-nstun-defaults
Action required
Harden jail mounts, capabilities, and nstun networking defaults GitHub Actions Scan #29: Pull request #296 opened by M0nd0R
10s
10s
contain: retain proc fd directory for descriptor sealing Docker #451: Pull request #294 opened by soul-sol
Action required soul-sol:harden-inherited-fd-sealing
soul-sol:harden-inherited-fd-sealing
Action required
contain: retain proc fd directory for descriptor sealing GitHub Actions Scan #28: Pull request #294 opened by soul-sol
16s
16s
Reject path traversal in mount destinations during jail staging Docker #450: Pull request #292 synchronize by M0nd0R
Action required M0nd0R:fix/mount-dst-path-traversal
M0nd0R:fix/mount-dst-path-traversal
Action required
Reject path traversal in mount destinations during jail staging GitHub Actions Scan #27: Pull request #292 synchronize by M0nd0R
21s
21s
unotify: write reports privately and atomically GitHub Actions Scan #26: Pull request #293 opened by carrerasdarren-cell
23s
23s
unotify: write reports privately and atomically Docker #449: Pull request #293 opened by carrerasdarren-cell
Action required carrerasdarren-cell:security/unotify-private-atomic-report
carrerasdarren-cell:security/unotify-private-atomic-report
Action required
Reject path traversal in mount destinations during jail staging Docker #448: Pull request #292 opened by M0nd0R
Action required M0nd0R:fix/mount-dst-path-traversal
M0nd0R:fix/mount-dst-path-traversal
Action required
Reject path traversal in mount destinations during jail staging GitHub Actions Scan #25: Pull request #292 opened by M0nd0R
12s
12s
Merge pull request #291 from yexinw-ctrl/statx-unotify-trace Docker #447: Commit 5ebcc30 pushed by robertswiecki
2m 47s master
master
2m 47s
unotify: trace statx GitHub Actions Scan #24: Pull request #291 opened by yexinw-ctrl
10s
10s
user: fail closed when supplementary groups cannot be set Docker #445: Pull request #288 synchronize by carrerasdarren-cell
Action required carrerasdarren-cell:fix/fail-closed-setgroups
carrerasdarren-cell:fix/fail-closed-setgroups
Action required
user: fail closed when supplementary groups cannot be set GitHub Actions Scan #23: Pull request #288 synchronize by carrerasdarren-cell
9s
9s
unotify: bound retained syscall statistics GitHub Actions Scan #22: Pull request #290 opened by rndaom
11s
11s
unotify: bound retained syscall statistics Docker #444: Pull request #290 opened by rndaom
Action required rndaom:harden/bound-unotify-stats
rndaom:harden/bound-unotify-stats
Action required
nstun: fail closed on invalid policy rule fields Docker #443: Pull request #289 opened by carrerasdarren-cell
Action required carrerasdarren-cell:fix/nstun-reject-invalid-rules
carrerasdarren-cell:fix/nstun-reject-invalid-rules
Action required
nstun: fail closed on invalid policy rule fields GitHub Actions Scan #21: Pull request #289 opened by carrerasdarren-cell
17s
17s
user: fail closed when supplementary groups cannot be set Docker #442: Pull request #288 opened by carrerasdarren-cell
Action required carrerasdarren-cell:fix/fail-closed-setgroups
carrerasdarren-cell:fix/fail-closed-setgroups
Action required
user: fail closed when supplementary groups cannot be set GitHub Actions Scan #20: Pull request #288 opened by carrerasdarren-cell
14s
14s
mnt: descriptor-confine mount destination resolution Docker #441: Pull request #287 opened by deprrous
Action required deprrous:agent/mount-destination-confinement-v8
deprrous:agent/mount-destination-confinement-v8
Action required
mnt: descriptor-confine mount destination resolution GitHub Actions Scan #19: Pull request #287 opened by deprrous
9s
9s
contain: stop setup if PR_SET_NO_NEW_PRIVS fails Docker #440: Pull request #286 opened by srkyn
Action required srkyn:harden-no-new-privs-failure
srkyn:harden-no-new-privs-failure
Action required