Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
google
/
nsjail
Public
Notifications
You must be signed in to change notification settings
Fork
361
Star
4.1k
Code
Issues
7
Pull requests
14
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Actions: google/nsjail
Actions
All workflows
Workflows
Docker
Docker
GitHub Actions Scan
GitHub Actions Scan
pages-build-deployment
pages-build-deployment
Show more workflows...
Management
Caches
Deployments
All workflows
All workflows
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Showing runs from all workflows
will be ignored since log searching is not yet available
260 workflow runs
260 workflow runs
Workflow
Filter by Workflow
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching workflows.
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
cpu: fail closed when --max_cpus exceeds available CPUs
GitHub Actions Scan
#61:
Pull request
#324
opened by
h1-mrz
15s
15s
View #324
View workflow file
cpu: fail closed when --max_cpus exceeds available CPUs
Docker
#504:
Pull request
#324
opened by
h1-mrz
Action required
h1-mrz:harden-cpu-max-cpus
h1-mrz:harden-cpu-max-cpus
Action required
View #324
View workflow file
logs: refuse symlinks when opening the log file (O_NOFOLLOW)
Docker
#503:
Pull request
#323
opened by
h1-mrz
Action required
h1-mrz:harden-logfile-onofollow
h1-mrz:harden-logfile-onofollow
Action required
View #323
View workflow file
logs: refuse symlinks when opening the log file (O_NOFOLLOW)
GitHub Actions Scan
#60:
Pull request
#323
opened by
h1-mrz
8s
8s
View #323
View workflow file
user: fail closed if supplementary groups survive a denied setgroups
Docker
#502:
Pull request
#320
opened by
andreeapid
-1s
andreeapid:setgroups-verify-empty
andreeapid:setgroups-verify-empty
-1s
View #320
View workflow file
user: fail closed if supplementary groups survive a denied setgroups
GitHub Actions Scan
#59:
Pull request
#320
opened by
andreeapid
10s
10s
View #320
View workflow file
tests: build and run path_containment_test
GitHub Actions Scan
#58:
Pull request
#322
opened by
andreeapid
10s
10s
View #322
View workflow file
tests: build and run path_containment_test
Docker
#501:
Pull request
#322
opened by
andreeapid
Action required
andreeapid:run-path-containment-test
andreeapid:run-path-containment-test
Action required
View #322
View workflow file
nstun/tcp: drop guest packets received before the handshake completes
Docker
#500:
Pull request
#321
opened by
andreeapid
Action required
andreeapid:nstun-tcp-handshake-gate
andreeapid:nstun-tcp-handshake-gate
Action required
View #321
View workflow file
nstun/tcp: drop guest packets received before the handshake completes
GitHub Actions Scan
#57:
Pull request
#321
opened by
andreeapid
8s
8s
View #321
View workflow file
mnt: re-flag every submount of a recursive bind
Docker
#499:
Pull request
#319
opened by
andreeapid
Action required
andreeapid:recursive-mount-flags
andreeapid:recursive-mount-flags
Action required
View #319
View workflow file
mnt: re-flag every submount of a recursive bind
GitHub Actions Scan
#56:
Pull request
#319
opened by
andreeapid
11s
11s
View #319
View workflow file
cmdline: reject inconsistent cgroup memory limits
Docker
#498:
Pull request
#318
opened by
samuelgirmametaferia
Action required
samuelgirmametaferia:fix/reject-invalid-cgroup-memsw-limit
samuelgirmametaferia:fix/reject-invalid-cgroup-memsw-limit
Action required
View #318
View workflow file
cmdline: reject inconsistent cgroup memory limits
GitHub Actions Scan
#55:
Pull request
#318
opened by
samuelgirmametaferia
11s
11s
View #318
View workflow file
nstun: validate ICMP reply peers
Docker
#497:
Pull request
#317
opened by
samuelgirmametaferia
Action required
samuelgirmametaferia:fix/nstun-icmp-reply-peer-validation
samuelgirmametaferia:fix/nstun-icmp-reply-peer-validation
Action required
View #317
View workflow file
nstun: validate ICMP reply peers
GitHub Actions Scan
#54:
Pull request
#317
opened by
samuelgirmametaferia
10s
10s
View #317
View workflow file
nstun: validate UDP reply peers
Docker
#496:
Pull request
#316
opened by
samuelgirmametaferia
Action required
samuelgirmametaferia:fix/nstun-udp-reply-peer-validation
samuelgirmametaferia:fix/nstun-udp-reply-peer-validation
Action required
View #316
View workflow file
nstun: validate UDP reply peers
GitHub Actions Scan
#53:
Pull request
#316
opened by
samuelgirmametaferia
9s
9s
View #316
View workflow file
nstun: preserve partial redirect targets
Docker
#495:
Pull request
#315
opened by
samuelgirmametaferia
Action required
samuelgirmametaferia:fix/nstun-partial-redirects
samuelgirmametaferia:fix/nstun-partial-redirects
Action required
View #315
View workflow file
nstun: preserve partial redirect targets
GitHub Actions Scan
#52:
Pull request
#315
opened by
samuelgirmametaferia
12s
12s
View #315
View workflow file
nstun: enforce flow limits across address families
GitHub Actions Scan
#51:
Pull request
#314
opened by
samuelgirmametaferia
11s
11s
View #314
View workflow file
nstun: enforce flow limits across address families
Docker
#494:
Pull request
#314
opened by
samuelgirmametaferia
1m 27s
samuelgirmametaferia:fix/nstun-aggregate-flow-limits
samuelgirmametaferia:fix/nstun-aggregate-flow-limits
1m 27s
View #314
View workflow file
mnt: fail closed when recursive mount restrictions cannot be applied
Docker
#493:
Pull request
#313
opened by
samuelgirmametaferia
Action required
samuelgirmametaferia:fix/fail-closed-recursive-mount-flags
samuelgirmametaferia:fix/fail-closed-recursive-mount-flags
Action required
View #313
View workflow file
mnt: fail closed when recursive mount restrictions cannot be applied
GitHub Actions Scan
#50:
Pull request
#313
opened by
samuelgirmametaferia
11s
11s
View #313
View workflow file
Merge pull request #310 from carrerasdarren-cell/fix/fail-closed-setsid
Docker
#492:
Commit
f100fd9
pushed by
robertswiecki
3m 41s
master
master
3m 41s
View workflow file
Previous
1
2
3
4
5
…
10
11
Next
You can’t perform that action at this time.