Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
rappdw
/
sandy
Public
Notifications
You must be signed in to change notification settings
Fork
4
Star
15
Code
Issues
25
Pull requests
0
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Actions: rappdw/sandy
Actions
All workflows
Workflows
Dependabot Updates
Dependabot Updates
Dependency Graph
Dependency Graph
Tests
Tests
Show more workflows...
Management
Caches
All workflows
All workflows
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Showing runs from all workflows
will be ignored since log searching is not yet available
460 workflow runs
460 workflow runs
Workflow
Filter by Workflow
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching workflows.
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
feat(claude): agent-layer tool-use audit hook (SANDY_TOOL_AUDIT, HF Issue 6)
Tests
#342:
Pull request
#92
opened by
rappdw
6m 50s
security/tool-use-audit
security/tool-use-audit
6m 50s
View #92
View workflow file
feat(proxy): log which hosts the agent's egress reached (SANDY_EGRESS_LOG, HF Issue 4)
Tests
#341:
Pull request
#91
synchronize by
rappdw
5m 21s
security/egress-telemetry
security/egress-telemetry
5m 21s
View #91
View workflow file
test(proxy): fuzz the wire parsers + document the proxy as in-scope (HF Issue 1)
Tests
#340:
Pull request
#90
synchronize by
rappdw
5m 13s
security/proxy-fuzz-vuln
security/proxy-fuzz-vuln
5m 13s
View #90
View workflow file
feat(proxy): auto-refresh the proxy image between releases (HF Issue …
Tests
#339:
Commit
f1b776f
pushed by
rappdw
5m 25s
main
main
5m 25s
View workflow file
feat(proxy): log which hosts the agent's egress reached (SANDY_EGRESS_LOG, HF Issue 4)
Tests
#338:
Pull request
#91
opened by
rappdw
5m 12s
security/egress-telemetry
security/egress-telemetry
5m 12s
View #91
View workflow file
test(proxy): fuzz the wire parsers + document the proxy as in-scope (HF Issue 1)
Tests
#337:
Pull request
#90
synchronize by
rappdw
5m 13s
security/proxy-fuzz-vuln
security/proxy-fuzz-vuln
5m 13s
View #90
View workflow file
feat(proxy): auto-refresh the proxy image between releases (HF Issue 3)
Tests
#336:
Pull request
#89
synchronize by
rappdw
5m 16s
security/proxy-image-freshness
security/proxy-image-freshness
5m 16s
View #89
View workflow file
feat(proxy): harden the egress proxy sidecar + bound concurrent conne…
Tests
#335:
Commit
47fa29f
pushed by
rappdw
5m 43s
main
main
5m 43s
View workflow file
test(proxy): fuzz the wire parsers + document the proxy as in-scope (HF Issue 1)
Tests
#334:
Pull request
#90
opened by
rappdw
3m 20s
security/proxy-fuzz-vuln
security/proxy-fuzz-vuln
3m 20s
View #90
View workflow file
feat(proxy): auto-refresh the proxy image between releases (HF Issue 3)
Tests
#333:
Pull request
#89
synchronize by
rappdw
4m 59s
security/proxy-image-freshness
security/proxy-image-freshness
4m 59s
View #89
View workflow file
feat(proxy): harden the egress proxy sidecar + bound concurrent connections (HF Issue 2)
Tests
#332:
Pull request
#88
synchronize by
rappdw
5m 17s
security/proxy-hardening
security/proxy-hardening
5m 17s
View #88
View workflow file
feat(proxy): harden the egress proxy sidecar + bound concurrent connections (HF Issue 2)
Tests
#331:
Pull request
#88
synchronize by
rappdw
4m 51s
security/proxy-hardening
security/proxy-hardening
4m 51s
View #88
View workflow file
docs(security): wrapped-agent CVE-watch posture (sandbox-escape Issue…
Tests
#330:
Commit
791a737
pushed by
rappdw
3m 16s
main
main
3m 16s
View workflow file
feat(proxy): auto-refresh the proxy image between releases (HF Issue 3)
Tests
#329:
Pull request
#89
opened by
rappdw
5m 21s
security/proxy-image-freshness
security/proxy-image-freshness
5m 21s
View #89
View workflow file
feat(proxy): harden the egress proxy sidecar + bound concurrent connections (HF Issue 2)
Tests
#328:
Pull request
#88
synchronize by
rappdw
5m 42s
security/proxy-hardening
security/proxy-hardening
5m 42s
View #88
View workflow file
docs(security): wrapped-agent CVE-watch posture (sandbox-escape Issue E)
Tests
#327:
Pull request
#87
synchronize by
rappdw
5m 7s
security/wrapped-agent-cve-watch
security/wrapped-agent-cve-watch
5m 7s
View #87
View workflow file
feat(security): session-end detection for a created-in-session core.h…
Tests
#326:
Commit
64c2ee7
pushed by
rappdw
5m 8s
main
main
5m 8s
View workflow file
feat(proxy): harden the egress proxy sidecar + bound concurrent connections (HF Issue 2)
Tests
#325:
Pull request
#88
opened by
rappdw
5m 8s
security/proxy-hardening
security/proxy-hardening
5m 8s
View #88
View workflow file
docs(security): wrapped-agent CVE-watch posture (sandbox-escape Issue E)
Tests
#324:
Pull request
#87
opened by
rappdw
5m 17s
security/wrapped-agent-cve-watch
security/wrapped-agent-cve-watch
5m 17s
View #87
View workflow file
feat(security): detect a created-in-session core.hooksPath dir (sandbox-escape Issue F)
Tests
#323:
Pull request
#86
synchronize by
rappdw
5m 16s
security/hookspath-session-end-detect
security/hookspath-session-end-detect
5m 16s
View #86
View workflow file
feat(security): warn when a host-reachable .venv isn't shadowed by th…
Tests
#322:
Commit
273bc91
pushed by
rappdw
4m 42s
main
main
4m 42s
View workflow file
feat(security): detect a created-in-session core.hooksPath dir (sandbox-escape Issue F)
Tests
#321:
Pull request
#86
opened by
rappdw
7m 50s
security/hookspath-session-end-detect
security/hookspath-session-end-detect
7m 50s
View #86
View workflow file
feat(security): warn when a host-reachable .venv isn't shadowed (sandbox-escape Issue C)
Tests
#320:
Pull request
#85
synchronize by
rappdw
5m 11s
security/venv-overlay-warning
security/venv-overlay-warning
5m 11s
View #85
View workflow file
docs(security): caveat — a host IDE on the shared workspace can run a…
Tests
#319:
Commit
86ac3bf
pushed by
rappdw
3m 15s
main
main
3m 15s
View workflow file
feat(security): warn when a host-reachable .venv isn't shadowed (sandbox-escape Issue C)
Tests
#318:
Pull request
#85
opened by
rappdw
5m 40s
security/venv-overlay-warning
security/venv-overlay-warning
5m 40s
View #85
View workflow file
Previous
1
2
3
4
5
6
7
…
18
19
Next
You can’t perform that action at this time.