Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: pullfrog/pullfrog
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.1.116
Choose a base ref
...
head repository: pullfrog/pullfrog
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.1.117
Choose a head ref
  • 2 commits
  • 20 files changed
  • 1 contributor

Commits on Nov 5, 2026

  1. sandbox: run the launcher's binaries only from root-controlled direct… 

    …ories, and probe the exact invocation (#1650)

sandbox: run the launcher's binaries only from root-controlled directories, and probe the exact invocation

the sandboxed command can write PATH directories ahead of /usr/bin (/usr/local/bin is 777 on a
GitHub-hosted runner), so a launcher that finds sudo, env, unshare, bash or setpriv by name could run
a planted copy outside the namespace or ahead of the seal. the launcher now resolves each from a
directory only root can write and runs it by absolute path; sudo goes back to an empty environment;
the setup shell takes --norc and closes stdin; the command's own PATH returns only inside the seal.

each detection probe now runs its branch's exact buildSandboxInvocation output, so a runner missing
part of it falls through to the next method instead of failing every command (#1639).

the action's remaining post-agent git calls (worktree, apiCommit, lifecycle, setup) go through $()
and so through the sandbox; package-manager probes go through buildSandboxedCommand; sudo, id and
chmod use trustedBinary. wiki/security.md documents the invariant.

Closes #1639
Closes #1642
    @colinhacks @pullfrog
    colinhacks authored and pullfrog[bot] committed Nov 5, 2026
    Configuration menu
    Copy the full SHA
    9bae990 View commit details
    Browse the repository at this point in the history

  2. release: bump action to 0.1.117

    @colinhacks @pullfrog
    colinhacks authored and pullfrog[bot] committed Nov 5, 2026
    Configuration menu
    Copy the full SHA
    a5cc969 View commit details
    Browse the repository at this point in the history
Loading