Repository Issue Activity (beta)

#1377 Use the supported separator for no-new-privileges

#1376 Feature Request / Question: Is secure credential injection for SSH on the roadmap?

#1373 CredentialMatch can't disambiguate two credentials bound to an identical destination shape

#143 Wanted: Who is using OpenSandbox | 如果贵司正在使用 OpenSandbox 请留言

#1370 egress sidecar restart rotates mitmproxy CA and breaks HTTPS from the agent container

#1360 fix(execd): fall back to sh in bash-session and isolated-session launch paths

#1366 Egress credential vault is lost on pause/resume (in-memory, not re-injected on resume)

#1355 bug(kubernetes): snapshots may miss recent guest filesystem writes under Kata

#1353 feat(sdk/go): add SandboxPoolManager with fence/tombstone parity with Python and Kotlin

#1362 README: Star History chart no longer renders for public visitors

#1358 fix(execd): fall back to sh for PTY sessions when Bash is unavailable

#1330 Helm chart opensandbox-controller does not expose the controller-runtime metrics endpoint

#1287 feat(sdk/server): first-class agent runtime inside a sandbox (spawn / stream / stop)

#1354 [osep-0004] Clarify: is "Startup Overhead" relative to runc, and how does it relate to the Cold/Warm Start table?

#1336 [helm] Pool CRD missing scaleStrategy/updateStrategy/recycleStrategy

#1348 opensandbox-controller Helm chart grants cluster-wide RBAC via ClusterRole/ClusterRoleBinding

#1078 Add the PTY session lifecycle to the execd spec and expose it in the SDKs

#1247 feat(execd): complete userns uid_mode support (SDK models + mode-aware probe)

#1315 `networkPolicy` is silently ignored when a sandbox is created with `extensions.poolRef` (K8s pool mode) — a security control is dropped with no error

#1205 [Feature] Add a name filter to GET /snapshots (and optionally snapshot labels) so snapshots can be looked up by key

#1322 Informer cache has no periodic relist causes persistent 404 POD_IP_NOT_AVAILABLE for Running sandboxes

#1262 feat(charts): add hand-crafted values.schema.json to all three charts

#1265 docs(security): make official container image provenance discoverable (DockerHub trust signals + README pointer)

#1332 Helm chart: ingress-gateway container has no way to set env vars (blocks OTLP metrics config)

#1334 egress sidecar OTel metrics can't be configured (SANDBOX_ID not allow-listed; no OTLP endpoint / HOST_IP reaches the sidecar)