Workflow Security Reports

Workflow runs for Workflow Security Reports

• fix(vm): relocate per-sandbox Unix sockets to /tmp to fit macOS sun_path

  requires action with the application:
  Workflow Security Reports#2801:Pull request#3544synchronizebybenoitf
  benoitf:fix/vm-socket-sun-path

  Sep 22, 2026Action required
  More actions for workflow run 2801

• docs(policy): refresh policy documentation and references

  completed successfully:
  Workflow Security Reports#2800:Pull request#3563synchronizebyjohnnygreco
  johnny/policy-documentation-rewrite

  Sep 22, 20261m 18s
  More actions for workflow run 2800

• fix(mxc): reject unsupported live policy updates

  completed successfully:
  Workflow Security Reports#2799:Pull request#3480synchronizebyprekshivyas
  prekshivyas:fix/nvbug-6782891-mxc-policy-update-gate

  Sep 22, 20261m 28s
  More actions for workflow run 2799

• fix(network): normalize Windows binary paths (NVBug 6782969)

  completed successfully:
  Workflow Security Reports#2798:Pull request#3482synchronizebyprekshivyas
  prekshivyas:fix/nvbug-6782969-windows-binary-path

  Sep 22, 20261m 24s
  More actions for workflow run 2798

• Workflow Security Reports

  completed successfully:
  Workflow Security Reports#2797:Merge group checks requested
  Sep 22, 20261m 26s
  More actions for workflow run 2797

• fix(api): make WatchSandbox loss-aware and resumable (#3209)

  completed successfully:
  Workflow Security Reports#2796:Commit470a346pushedbygithub-merge-queue[bot]Bot
  main

  Sep 22, 20261m 24s
  More actions for workflow run 2796

• fix(drivers): require admission labels for external resources

  completed successfully:
  Workflow Security Reports#2795:Pull request#3538synchronizebydrew
  codex/require-external-resource-admission-labels

  Sep 22, 20261m 14s
  More actions for workflow run 2795

• Workflow Security Reports

  completed successfully:
  Workflow Security Reports#2794:Merge group checks requested
  Sep 22, 20268m 49s
  More actions for workflow run 2794

• docs(windows): align Z3 pin with z3-sys 0.13 (#3561)

  completed successfully:
  Workflow Security Reports#2793:Commit8835777pushedbygithub-merge-queue[bot]Bot
  main

  Sep 22, 20262m 2s
  More actions for workflow run 2793

• docs(policy): refresh policy documentation and references

  completed successfully:
  Workflow Security Reports#2792:Pull request#3563openedbyjohnnygreco
  johnny/policy-documentation-rewrite

  Sep 22, 20261m 17s
  More actions for workflow run 2792

• fix(auth): remove legacy sandbox JWT admission

  completed successfully:
  Workflow Security Reports#2791:Pull request#3562openedbypimlock
  remove-legacy-sandbox-jwt/pimlock

  Sep 22, 20261m 15s
  More actions for workflow run 2791

• fix(network): bound chunked relay memory

  completed successfully:
  Workflow Security Reports#2790:Pull request#3537synchronizebypimlock
  bounded-chunked-relay/pimlock

  Sep 22, 20261m 56s
  More actions for workflow run 2790

• Workflow Security Reports

  completed successfully:
  Workflow Security Reports#2789:Merge group checks requested
  Sep 22, 20261m 43s
  More actions for workflow run 2789

• fix(sandbox): reclaim socket descriptors before exhaustion (#3532)

  completed successfully:
  Workflow Security Reports#2788:Commite367d47pushedbygithub-merge-queue[bot]Bot
  main

  Sep 22, 20261m 20s
  More actions for workflow run 2788

• fix(network): preserve chunked request boundaries (#3530)

  completed successfully:
  Workflow Security Reports#2787:Commit4b1c09dpushedbygithub-merge-queue[bot]Bot
  main

  Sep 22, 20261m 25s
  More actions for workflow run 2787

• Workflow Security Reports

  completed successfully:
  Workflow Security Reports#2786:Merge group checks requested
  Sep 22, 20261m 37s
  More actions for workflow run 2786

• NVBug 6783374: make MXC HTTPS L7 qualification authoritative

  completed successfully:
  Workflow Security Reports#2785:Pull request#3479synchronizebyshailendra-nv
  prekshivyas:fix/nvbug-6783374-https-l7-qualification

  Sep 22, 20261m 30s
  More actions for workflow run 2785

• fix(drivers): require admission labels for external resources

  completed successfully:
  Workflow Security Reports#2784:Pull request#3538synchronizebydrew
  codex/require-external-resource-admission-labels

  Sep 22, 20261m 14s
  More actions for workflow run 2784

• Workflow Security Reports

  completed successfully:
  Workflow Security Reports#2783:Merge group checks requested
  Sep 22, 20261m 30s
  More actions for workflow run 2783

• fix(drivers): require admission labels for external resources

  completed successfully:
  Workflow Security Reports#2782:Pull request#3538synchronizebydrew
  codex/require-external-resource-admission-labels

  Sep 22, 20261m 22s
  More actions for workflow run 2782

• fix(api): make WatchSandbox loss-aware and resumable

  completed successfully:
  Workflow Security Reports#2781:Pull request#3209synchronizebyjohntmyers
  letv1nnn:3055-watch-resumable-cursor/letv1nnn

  Sep 22, 20261m 13s
  More actions for workflow run 2781

• fix(network): scope Windows egress by socket owner

  completed successfully:
  Workflow Security Reports#2780:Pull request#3491synchronizebyprekshivyas
  prekshivyas:fix/windows-process-identity

  Sep 22, 20261m 27s
  More actions for workflow run 2780

• fix(api): make WatchSandbox loss-aware and resumable

  failed:
  Workflow Security Reports#2779:Pull request#3209synchronizebyjohntmyers
  letv1nnn:3055-watch-resumable-cursor/letv1nnn

  Sep 22, 20261h 28m 9s
  More actions for workflow run 2779

• fix(api): make WatchSandbox loss-aware and resumable

  requires action with the application:
  Workflow Security Reports#2778:Pull request#3209synchronizebyjohntmyers
  letv1nnn:3055-watch-resumable-cursor/letv1nnn

  Sep 22, 2026Action required
  More actions for workflow run 2778

• fix(policy)!: reject removed tls endpoint values (#3414)

  completed successfully:
  Workflow Security Reports#2777:Commit718dba3pushedbygithub-merge-queue[bot]Bot
  main

  Sep 22, 20261m 17s
  More actions for workflow run 2777