$ the-wire · showcase
srt-proxy leaks trailers across Bun connections, and the Linux wrap stops blaming the config
By RepoJournal · Filed · About Anthropic · Composed from the cited sources · methodology
sandbox-runtime fixed a Bun-only proxy bug that silently rewrote the second request on a connection, while oss-scanner turned enrolment triage into an automatic PR comment.
Keep a request's trailers out of the next request on its connection (Bun) anthropics/sandbox-runtime
Under Bun, a chunked request with trailers poisoned the request that followed it on the same connection: the second arrived as "GET /first/second" carrying the earlier request's trailer as a header, and both the request filter and the upstream saw the same wrong request. It affects every connection srt-proxy hands to an HTTP server on plain HTTP; a companion commit carries the same fix.
linux: the refusal at 9000 bwrap arguments says whose they are anthropics/sandbox-runtime
bubblewrap's MAX_ARGS of 9,000 was refused with "reduce what the configuration expands to", which is advice nobody can follow when the arguments come from the mandatory denies derived from what the working directory holds. Since #629 each git repository one level below the working directory costs four read-only binds, so the error now names whose arguments they are.
Comment on enrolment pull requests with triage information anthropics/oss-scanner
A new workflow comments on every pull request touching projects/ with the rows a reviewer would otherwise look up by hand: repository age and activity, stars and forks, criticality score from the OpenSSF formula, license class, and whether the opener looks like an active maintainer. The comment informs the review and decides nothing.
linux: a deny set's mounts do not depend on the order it was written in anthropics/sandbox-runtime
On Linux, a write-deny list naming one path both directly and through a symlink with a directory above it denied could get or lose that path's read-only bind depending on which spelling came first. Nothing was left writable either way; the skip is now decided on the destination, which any deny entry reaching it covers.
Harden the triage script against hostile input, and say more about licenses anthropics/oss-scanner
by OSS Scanner
Elsewhere in the scanner, the triage script now parses text anyone can write: patterns hunting addresses and checkboxes no longer stall on long runs of one character, searched-only files are read to 256 KiB, non-string YAML values print as their type, and redirects follow only within api.github.com. The same pass added the SECURITY.md contact-address row and enrolled projects/nss.
Action items
- → Upgrade sandbox-runtime to a build containing the Bun trailer fix if you run srt-proxy on plain HTTP anthropics/sandbox-runtime [plan]
