Issues

• Allow session commands to opt out of GitHub credential forwarding

  trailofbits/coop#562 · Filter by author hbrodin opened on Oct 8, 2026

• Initial macOS workspace copy and later push disagree on ignored files

  trailofbits/coop#561 · Filter by author hbrodin opened on Oct 8, 2026

• Rust profile installs rustup shims without a usable guest toolchain

  trailofbits/coop#560 · Filter by author hbrodin opened on Oct 8, 2026

• Evaluate OpenVMM as a future cross-platform VM backend

  trailofbits/coop#559 · Filter by author hbrodin opened on Oct 8, 2026

• Disable VM nesting in the Firecracker CPU template

  trailofbits/coop#527 · Filter by author disconnect3d opened on Oct 1, 2026
  1

• Evaluate isolation from ambient SSH SendEnv rules

  trailofbits/coop#519 · Filter by author hbrodin opened on Sep 30, 2026

• Run the OpenSSH forwarding fixture during remote full integration

  trailofbits/coop#510 · Filter by author hbrodin opened on Sep 29, 2026

• Support desktop Remote SSH discovery and guest keyring authentication

  trailofbits/coop#480 · Filter by author hbrodin opened on Sep 15, 2026

• Research Firecracker jailer integration and VMM privilege reduction

  trailofbits/coop#479 · Filter by author hbrodin opened on Sep 15, 2026

• Research virtualization dependency freshness and update visibility

  trailofbits/coop#478 · Filter by author hbrodin opened on Sep 15, 2026

• Research whether the Firecracker vsock device is needed

  trailofbits/coop#477 · Filter by author hbrodin opened on Sep 15, 2026

• Run Linux image provisioning inside a Firecracker builder VM

  trailofbits/coop#474 · Filter by author hbrodin opened on Sep 14, 2026

• Separate stored GitHub PAT identity, VM assignments, and repository defaults

  trailofbits/coop#469 · Filter by author hbrodin opened on Sep 11, 2026

• Import personal Codex skills and effective global instructions into guests

  trailofbits/coop#461 · Filter by author hbrodin opened on Sep 9, 2026

• Guided setup for selecting and provisioning Claude and Codex customization

  trailofbits/coop#460 · Filter by author hbrodin opened on Sep 9, 2026

• Installing missing host packages assumes apt

  trailofbits/coop#456 · Filter by author mdspan opened on Sep 8, 2026
  1

• coop pull is not --delete-symmetric with push, and can leave the host on a stale git ref

  trailofbits/coop#427 · Filter by author hbrodin opened on Aug 6, 2026
  1

• Make the attestation-API fallback credential-free for pre-bundle releases

  trailofbits/coop#423 · Filter by author evandowning opened on Jul 30, 2026

• Research: hardening gaps in the coop update / install verification chain

  enhancementsecurity
  trailofbits/coop#422 · Filter by author hbrodin opened on Jul 30, 2026

• Tamper-evident audit trail of agent actions

  enhancementsecurity
  trailofbits/coop#413 · Filter by author claude opened on Jul 16, 2026
  2

• Defense-in-depth: support/document an in-guest least-privilege sandbox layer

  component:documentationenhancementsecurity
  trailofbits/coop#412 · Filter by author claude opened on Jul 16, 2026

• Credential non-exposure: inject secrets upstream so the agent never sees raw keys

  enhancementsecurity
  trailofbits/coop#411 · Filter by author claude opened on Jul 16, 2026

• macOS/Lima: guest DNS goes stale on host network change (fix without VM restart)

  bug 🐛enhancement ✨platform:macos 🍎
  trailofbits/coop#405 · Filter by author hbrodin opened on Jul 13, 2026
  3

• Consider publishing to crates.io for cargo install coop

  trailofbits/coop#392 · Filter by author hbrodin opened on Jul 6, 2026

• Profile install scripts run before the guest user is created

  trailofbits/coop#381 · Filter by author hbrodin opened on Jul 2, 2026