navikt

navikt/cplt

Sandbox for AI coding agents. Runs Copilot CLI, Claude Code, OpenCode, Gemini CLI, Antigravity, Pi, goose or a plain shell inside a kernel-level sandbox, with git and gh guards and sandbox policy committed to the repository.

8 good first / help-wanted issues · Rust · last activity Sep 8, 2026

114 stars 22 forks 114 watchers Rust MIT License
agentic-ai copilot gemini opencode sandbox
View on GitHub Website
8 Open Issues Need Help Last updated: Sep 8, 2026

Open Issues Need Help

View All on GitHub
Branch tracking silently dropped: .git/config deny exits 0 and reports success about 2 months ago
bug documentation good first issue
navikt/cplt
114

Sandbox for AI coding agents. Runs Copilot CLI, Claude Code, OpenCode, Gemini CLI, Antigravity, Pi, goose or a plain shell inside a kernel-level sandbox, with git and gh guards and sandbox policy committed to the repository.

Rust
#agentic-ai#copilot#gemini#opencode#sandbox
Linux: ~/.copilot is granted write+execute by default, for a reason that does not hold about 2 months ago
help wanted security
navikt/cplt
114

Sandbox for AI coding agents. Runs Copilot CLI, Claude Code, OpenCode, Gemini CLI, Antigravity, Pi, goose or a plain shell inside a kernel-level sandbox, with git and gh guards and sandbox policy committed to the repository.

Rust
#agentic-ai#copilot#gemini#opencode#sandbox
Probe whether Copilot authenticates with an injected token under a grant-dropped profile about 2 months ago
enhancement help wanted security
navikt/cplt
114

Sandbox for AI coding agents. Runs Copilot CLI, Claude Code, OpenCode, Gemini CLI, Antigravity, Pi, goose or a plain shell inside a kernel-level sandbox, with git and gh guards and sandbox policy committed to the repository.

Rust
#agentic-ai#copilot#gemini#opencode#sandbox
Suspected: ~/.konan is process-exec denied, but Kotlin/Native execs its downloaded LLVM toolchain from there about 2 months ago
bug help wanted
navikt/cplt
114

Sandbox for AI coding agents. Runs Copilot CLI, Claude Code, OpenCode, Gemini CLI, Antigravity, Pi, goose or a plain shell inside a kernel-level sandbox, with git and gh guards and sandbox policy committed to the repository.

Rust
#agentic-ai#copilot#gemini#opencode#sandbox
colima: non-default profiles and ~/.testcontainers.properties are not covered by allow_docker about 2 months ago
bug good first issue security
navikt/cplt
114

Sandbox for AI coding agents. Runs Copilot CLI, Claude Code, OpenCode, Gemini CLI, Antigravity, Pi, goose or a plain shell inside a kernel-level sandbox, with git and gh guards and sandbox policy committed to the repository.

Rust
#agentic-ai#copilot#gemini#opencode#sandbox
Landlock does not mediate stat/access: a denied file reports as readable, and check-then-use loaders break about 2 months ago
documentation good first issue security
navikt/cplt
114

Sandbox for AI coding agents. Runs Copilot CLI, Claude Code, OpenCode, Gemini CLI, Antigravity, Pi, goose or a plain shell inside a kernel-level sandbox, with git and gh guards and sandbox policy committed to the repository.

Rust
#agentic-ai#copilot#gemini#opencode#sandbox
cplt config set accepts a grant the tool refuses at every launch about 2 months ago
bug good first issue
navikt/cplt
114

Sandbox for AI coding agents. Runs Copilot CLI, Claude Code, OpenCode, Gemini CLI, Antigravity, Pi, goose or a plain shell inside a kernel-level sandbox, with git and gh guards and sandbox policy committed to the repository.

Rust
#agentic-ai#copilot#gemini#opencode#sandbox
discover_electron_app documents Cursor/Windsurf support it cannot reach about 2 months ago
bug good first issue
navikt/cplt
114

Sandbox for AI coding agents. Runs Copilot CLI, Claude Code, OpenCode, Gemini CLI, Antigravity, Pi, goose or a plain shell inside a kernel-level sandbox, with git and gh guards and sandbox policy committed to the repository.

Rust
#agentic-ai#copilot#gemini#opencode#sandbox