Skip to content

Actions: NVIDIA/OpenShell

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows
2,500+ workflow runs
2,500+ workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

sec(ci): add cargo-deny for dependency vulnerability scanning DCO Assistant #1667: Issue comment #589 (comment) created by johntmyers
6s
6s
sec(deploy): apply Pod Security Standards to sandbox namespace DCO Assistant #1666: Issue comment #597 (comment) created by johntmyers
9s
9s
sec(server): explicitly pin TLS protocol versions for defence in depth DCO Assistant #1665: Issue comment #596 (comment) created by johntmyers
6s
6s
sec(sandbox): log push may leak sensitive structured fields to gateway DCO Assistant #1664: Issue comment #595 (comment) created by johntmyers
9s
9s
sec(server): validate environment key names for control characters in exec requests DCO Assistant #1663: Issue comment #594 (comment) created by johntmyers
6s
6s
sec(cli): shell_escape missing null byte and newline rejection DCO Assistant #1662: Issue comment #588 (comment) created by johntmyers
7s
7s
sec(bootstrap): PKI certificates never expire (validity 1975–4096) DCO Assistant #1661: Issue comment #587 (comment) created by johntmyers
6s
6s
sec(sandbox): graceful degradation to no network namespace isolation DCO Assistant #1660: Issue comment #586 (comment) created by johntmyers
8s
8s
sec(sandbox): seccomp bypassed entirely when NetworkMode::Allow DCO Assistant #1659: Issue comment #585 (comment) created by johntmyers
7s
7s
sec(router): deprecate plaintext api_key field in route config YAML DCO Assistant #1658: Issue comment #583 (comment) created by johntmyers
8s
8s
sec(server): credentials exposed over gRPC when --no-auth mode is active DCO Assistant #1657: Issue comment #582 (comment) created by johntmyers
7s
7s
sec(sandbox): non-constant-time HMAC comparison in SSH handshake DCO Assistant #1656: Issue comment #580 (comment) created by johntmyers
9s
9s
sec(sandbox): reduce SYS_ADMIN and SYS_PTRACE capabilities on sandbox pods DCO Assistant #1655: Issue comment #579 (comment) created by johntmyers
8s
8s
sec(sandbox): seccomp filter allows dangerous syscalls (ptrace, mount, unshare, bpf) DCO Assistant #1654: Issue comment #578 (comment) created by johntmyers
6s
6s
Release Canary Release Canary #149: completed by johntmyers
2m 19s
2m 19s
Vouch Command Vouch Command #45: created by johntmyers
4s
4s
fix(sandbox,server): fix chunk merge duplicates and OPA variable collision with overlapping policies DCO Assistant #1653: Pull request #571 closed by johntmyers
10s
10s
fix(sandbox,server): fix chunk merge duplicates and OPA variable coll… Release Dev #114: Commit 256f7fc pushed by johntmyers
14m 11s main
main
14m 11s
sec(deploy): apply Pod Security Standards to sandbox namespace Issue Triage Gate #85: Issue #597 opened by cluster2600
Skipped
Skipped
sec(server): explicitly pin TLS protocol versions for defence in depth Issue Triage Gate #84: Issue #596 opened by cluster2600
1s
1s
sec(sandbox): log push may leak sensitive structured fields to gateway Issue Triage Gate #83: Issue #595 opened by cluster2600
1s
1s
sec(server): validate environment key names for control characters in exec requests Issue Triage Gate #82: Issue #594 opened by cluster2600
1s
1s
sec(sandbox): upgrade Landlock ABI from V2 to highest available Issue Triage Gate #81: Issue #593 opened by cluster2600
1s
1s
sec(sandbox): missing 0.0.0.0 (unspecified address) check in SSRF protection Issue Triage Gate #80: Issue #592 opened by cluster2600
1s
1s
sec(install): checksum verification silently skipped when sha256sum unavailable Issue Triage Gate #79: Issue #590 opened by cluster2600
2s
2s
ProTip! You can narrow down the results and go further in time using created:<2026-03-24 or the other filters available.