From 51cc2ef1d8fad61ed3c030a6416641025489d07b Mon Sep 17 00:00:00 2001 From: Miguel Martinez Trivino Date: Mon, 31 Aug 2026 19:07:47 +0200 Subject: [PATCH] feat(devel): allow download.chainloop.dev egress in the sandbox kit Assisted-by: Claude Code Signed-off-by: Miguel Martinez Trivino Chainloop-Trace-Sessions: 9642cc84-ac9b-46ca-81d1-6773941d8280 --- devel/sandbox-kit/spec.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/devel/sandbox-kit/spec.yaml b/devel/sandbox-kit/spec.yaml index 31b3ea842..d370bf394 100644 --- a/devel/sandbox-kit/spec.yaml +++ b/devel/sandbox-kit/spec.yaml @@ -372,6 +372,7 @@ permissions: # v1: `network.allowedDomains:` # resolve the buf.yaml module deps and the remote # plugins declared in the buf.gen.yaml files - "dl.chainloop.dev:443" # EE CLI installer + - "download.chainloop.dev:443" # CLI binary downloads the installer fetches - "chainloop-baafegchfnekdcde.z02.azurefd.net:443" # EE CLI download CDN - "github.com:443" # git push over HTTPS in persistent mode - the # pre-push attestation egresses on push. Other