Repository navigation

feat(docker): enforce pinned Linux egress allowlists - #48

Merged

senamakel merged 15 commits into

epic/7328-security-busfrom

tinybox-live-allowlist-7328

Oct 23, 2026

Merged

feat(docker): enforce pinned Linux egress allowlists#48
senamakel merged 15 commits into
epic/7328-security-busfrom
tinybox-live-allowlist-7328

Commits on Oct 23, 2026
- test(sandbox): cover egress controller prepare and cleanup ordering
  
  senamakel
  and
  medullabot
  committed
  b06e770
- feat(docker): pin egress allowlist destinations for firewall enforcement
  
  senamakel
  and
  medullabot
  committed
  c14a4b1
- feat(core): add host execution location capability
  
  senamakel
  and
  medullabot
  committed
  06ae277
- feat(sandbox): attach allowlisted egress network to docker run
  
  senamakel
  and
  medullabot
  committed
  35b78d2
- feat(docker): add egress controller support for allowlist policies
  
  senamakel
  and
  medullabot
  committed
  afabdcf
- fix(sandbox): clone attempt when recording failed create attempts
  
  senamakel
  and
  medullabot
  committed
  88c7eaa
- test(docker): add live network policy connectivity coverage
  
  senamakel
  and
  medullabot
  committed
  0cf6788
- refactor(sandbox): simplify egress error handling and cleanup guard
  
  senamakel
  and
  medullabot
  committed
  1cde5ec
- test(sandbox): use explicit ip literal in egress test fixture
  
  senamakel
  and
  medullabot
  committed
  057e2f5
- fix(egress): strip trailing dots when normalizing hosts
  
  senamakel
  and
  medullabot
  committed
  9fd8377
- test(host): cover execution location and controller host forwarding
  
  senamakel
  and
  medullabot
  committed
  ed04333
- test(local): cover workspace file access and forward addresses
  
  senamakel
  and
  medullabot
  committed
  a4f576c
- test(local): assert forward address and directness
  
  senamakel
  and
  medullabot
  committed
  7017129
- chore(deps): bump tokio to 1.53.3 and windows-sys to 0.61.2
  
  senamakel
  and
  medullabot
  committed
  5a9478c
- fix(limited): silence deprecation warning for async pipe registration
  
  senamakel
  and
  medullabot
  committed
  56ff7ed

Commits

Commits on Oct 23, 2026