Skip to content

fix: reclaim root-owned sandbox firewall dirs to prevent EACCES on reused runners #44276

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
pelikhan merged 13 commits into from
Jul 9, 2026
Merged

fix: reclaim root-owned sandbox firewall dirs to prevent EACCES on reused runners #44276

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
2225fcc
Initial plan
Copilot Jul 8, 2026
40dc28f
Initial plan
Copilot Jul 8, 2026
24765cc
fix: reclaim root-owned sandbox firewall dirs before and after AWF runs
Copilot Jul 8, 2026
c0836bf
Merge branch 'main' into copilot/fix-sandbox-cleanup-ownership
pelikhan Jul 8, 2026
7b26177
plan: address review feedback on comments, test names, and shell scri…
Copilot Jul 8, 2026
26c85ad
fix: address review feedback - shell hardening, comments, test rename
Copilot Jul 8, 2026
e567bb6
refactor: extract Print firewall logs inline shell into print_firewal…
Copilot Jul 8, 2026
af81145
Merge remote-tracking branch 'origin/main' into copilot/fix-sandbox-c…
Copilot Jul 8, 2026
3d4e525
recompile: update smoke-copilot-small.lock.yml to use print_firewall_…
Copilot Jul 8, 2026
4346250
Merge branch 'main' into copilot/fix-sandbox-cleanup-ownership
github-actions[bot] Jul 8, 2026
da77b39
Merge remote-tracking branch 'origin/main' into copilot/fix-sandbox-c…
Copilot Jul 8, 2026
502a121
Merge remote-tracking branch 'origin/main' into copilot/fix-sandbox-c…
Copilot Jul 9, 2026
e9f10cd
fix: address Matt Pocock Skills review - subdir guard, GITHUB_STEP_SU…
Copilot Jul 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 1 addition & 9 deletions .github/workflows/ab-testing-advisor.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/ace-editor.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/agent-performance-analyzer.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/agent-persona-explorer.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/agentic-token-audit.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/agentic-token-optimizer.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/agentic-token-trend-audit.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/ai-moderator.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/api-consumption-report.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/approach-validator.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/archie.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/architecture-guardian.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/artifacts-summary.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/audit-workflows.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/auto-triage-issues.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/avenger.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/aw-failure-investigator.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/blog-auditor.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/bot-detection.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/brave.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/breaking-change-checker.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 1 addition & 9 deletions .github/workflows/changeset.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading