feat: mount host filesystem read-only with isolate.sh fallback - #439

Closed

Mossaka with Copilot wants to merge 15 commits into

mainfrom

copilot/secure-host-filesystem-mount

Commits on Jan 30, 2026

Initial plan

Copilot
authored and
Mossaka
committed
790bab5
feat: mount host filesystem as read-only with isolate.sh fallback

Copilot
and
Mossaka
committed
8f11448
docs: update AGENTS.md with read-only mount and isolate.sh documentation

Copilot
and
Mossaka
committed
f9f9d11
fix: address code review feedback for isolate.sh

Copilot
and
Mossaka
committed
9b2c73d
fix: remove isolate.sh chroot to address security review
Mossaka
committed
07e878c

Commits on Feb 3, 2026

Merge branch 'main' of https://github.com/github/gh-aw-firewall into copilot/secure-host-filesystem-mount
Copilot
committed
6481f74

Commits on Feb 4, 2026

0.13.2

Mossaka
authored and
Copilot
committed
cd81e21
feat(cli): add --skip-pull flag to use pre-downloaded images (#493)

authored and
Copilot
committed
4e2e03b
0.13.3

Mossaka
authored and
Copilot
committed
b2885ba
fix: add GOROOT/bin to PATH in chroot mode for correct Go version

authored and
Copilot
committed
c9d6cda
chore: bump version to 0.13.4

Mossaka
authored and
Copilot
committed
59529b3
fix: eliminate host binary dependency in setup-iptables for chroot mode (#456)

Copilot
and
Mossaka
committed
443617a
feat: allow empty allowDomains to block all network access (#451)

Copilot
and
Mossaka
committed
75023ce
feat: filter benign operational logs from Squid access.log (#432)

Copilot
and
Mossaka
committed
da63e57
chore: rebase on main and remove stale isolate.sh comment

Copilot
and
Mossaka
committed
6255270