issues Search Results · language:Dune language:Python language:JavaScript language:Go language:JavaScript linked:pr
Filter by
5.6M results
Part of #37 (test-coverage gaps). src/bastille/_audit.py is ~25% covered; several violation classifications are
untested.
Tested today: network.connect, process.spawn (via subprocess.Popen), native.ctypes, ...
tests
iamsharduld
Part of #37 (test-coverage gaps). Public Sandbox API behaviors with no coverage.
- [ ] _parse_mem_limit — unit-test 512M, 1G, 256K, bare int, and invalid input (abc, empty). Currently zero tests.
...
tests
Part of #37 (test-coverage gaps). Regression tests tied to the open security findings — add alongside each fix.
- [ ] #34 (x32 ABI bypass) — assert an x32-numbered denylisted syscall (nr | 0x40000000, ...
security
tests
Part of #37 (test-coverage gaps).
Two filesystem-isolation properties the audit relied on are currently unverified.
Symlink escape (classic vector)
- In an allowlisted writable dir, create a symlink ...
security
tests
Part of #37 (test-coverage gaps).
Namespace isolation is a core guarantee but is not directly asserted (only filesystem/network are). Add
tests/test_namespaces.py.
PID namespace (highest value)
- ...
security
tests
Part of #37 (test-coverage gaps).
The seccomp filter blocks 16 syscalls (BLOCKED_SYSCALLS in src/bastille/_syscalls.py), but the escape suite only asserts
two of them (ptrace, mount). The denylist is ...
security
tests
Summary
#1181 exposed a concrete product failure: AIppocampus can find source-openable routes, but the foreground packets can be
so conservative that the agent still has to blindly deepen every candidate ...
enhancement
Sapientropic
Context
Issue #65 implemented parse_llm_response() following the original design doc (issue-a-design.md). During review, a
canonical spec was produced that codifies the exact module structure, constructor ...
Argenis1412
Description Requirements
Update the repository Harness framework/runtime to upstream Harness CLI release harness-cli-v0.1.9 from
https://github.com/hoangnb24/repository-harness.
Scope:
- Refresh ...
nagicantsleep
背景
#472 修复 Drone PR 触发器后，PR verification 终于真正跑起来，暴露两处在触发器 bug 期间（服务器重装后所有 PR 构建被静默跳过）混入 main 的存量腐烂，当前所有 PR 的
backend-verification 必红（Drone build #4/#6/#7 失败）：
1. api/admin.api:242 ClientMeta map[string]any ...
wujunhui99
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.