Search results

[Security] --allow-full-filesystem-access bypasses MCP log hiding via /host mount

Status: Open.

#764 In github/gh-aw-firewall;

· Mossaka opened on Feb 12, 2026

[Bug] .npmrc tmpfs mount creates empty directory instead of hiding file

Status: Open.

#763 In github/gh-aw-firewall;

· Mossaka opened on Feb 12, 2026

[Testing] Chroot escape test coverage gaps - missing pivot_root, mount, unshare, SYS_ADMIN tests

Status: Open.

#762 In github/gh-aw-firewall;

· Mossaka opened on Feb 12, 2026

[Testing] Credential hiding integration tests only cover 3 of 14 protected paths

Status: Open.

#761 In github/gh-aw-firewall;

· Mossaka opened on Feb 12, 2026

[Testing] Missing integration test for workDir tmpfs hiding (docker-compose.yml secret exposure)

Status: Open.

#759 In github/gh-aw-firewall;

· Mossaka opened on Feb 12, 2026

[Security] One-shot token logs partial token values (first 4 chars) to stderr

Status: Open.

#758 In github/gh-aw-firewall;

· Mossaka opened on Feb 12, 2026

[Security] secure_getenv() bypasses one-shot token protection when called before getenv()

Status: Open.

#756 In github/gh-aw-firewall;

· Mossaka opened on Feb 12, 2026

[agentics] Smoke Codex failed

agentic-workflows

Status: Open.

#755 In github/gh-aw-firewall;

· github-actions opened on Feb 12, 2026

[agentics] Security Guard failed

agentic-workflows

Status: Open.

#753 In github/gh-aw-firewall;

· github-actions opened on Feb 12, 2026

[Security Review] 2026-02-12 Comprehensive Security Review and Threat Analysis

Status: Open.

#748 In github/gh-aw-firewall;

· github-actions opened on Feb 12, 2026

Possible perf improvement: Container shutdown reported as 10sec

Status: Open.

#747 In github/gh-aw-firewall;

· dsyme opened on Feb 12, 2026

[agentics] Issue Monster failed

agentic-workflows

Status: Open.

#739 In github/gh-aw-firewall;

· github-actions opened on Feb 12, 2026