feat: mount host filesystem read-only with isolate.sh fallback#439

Closed

Copilot wants to merge 15 commits intomainfrom

copilot/secure-host-filesystem-mount

Commits on Feb 3, 2026

Merge branch 'main' of https://github.com/github/gh-aw-firewall into copilot/secure-host-filesystem-mount
Copilot
committed

Commits on Feb 4, 2026

0.13.2

Mossaka
authored and
Copilot
committed
feat(cli): add --skip-pull flag to use pre-downloaded images (#493)

authored and
Copilot
committed
0.13.3

Mossaka
authored and
Copilot
committed
fix: add GOROOT/bin to PATH in chroot mode for correct Go version

authored and
Copilot
committed
chore: bump version to 0.13.4

Mossaka
authored and
Copilot
committed
fix: eliminate host binary dependency in setup-iptables for chroot mode (#456)

Copilot
and
Mossaka
committed
feat: allow empty allowDomains to block all network access (#451)

Copilot
and
Mossaka
committed
feat: filter benign operational logs from Squid access.log (#432)

Copilot
and
Mossaka
committed
chore: rebase on main and remove stale isolate.sh comment

Copilot
and
Mossaka
committed