Issues

• feat(secret): Narrow an AWS role session with --policy-arns

  enhancement
  brig-sh/brig#576 · Filter by author asapranidis opened on Nov 3, 2026

• fix(runtime): Send SIGTERM, not SIGKILL, when a hull exec probe times out

  brig-sh/brig#575 · Filter by author ananos opened on Nov 2, 2026

• Small output and docs issues from the v0.5.0 stress run

  bugdocumentationP2
  brig-sh/brig#567 · Filter by author ananos opened on Oct 31, 2026 · M5

• An upgrade to v0.5.0 gives no notice of the removals, and an old run line boots the default session

  bugP2
  brig-sh/brig#566 · Filter by author ananos opened on Oct 31, 2026 · M5

• brig policy check says enforced on a kernel that cannot create the inet table

  bugP2
  brig-sh/brig#565 · Filter by author ananos opened on Oct 31, 2026 · M5

• A guest that dies at boot is reported only after the ready timeout, and a small --mem reads as a bad kernel

  bugP2
  brig-sh/brig#564 · Filter by author ananos opened on Oct 31, 2026 · M5

• brig doctor and brig run disagree on the image check under a per-agent verify mode

  bugP2
  brig-sh/brig#563 · Filter by author ananos opened on Oct 31, 2026 · M5

• install.sh on macOS does not install or mention e2fsprogs, so a curl install boots the slower virtiofs root

  bugP2
  brig-sh/brig#562 · Filter by author ananos opened on Oct 31, 2026 · M5

• BRIG_HYPERVISOR=firecracker is documented but cannot boot a generic-boot profile

  bugP2
  brig-sh/brig#561 · Filter by author ananos opened on Oct 31, 2026 · M5

• BRIG_HYPERVISOR and BRIG_ROOTFS_MODE are not checked before a run, and info and plan accept what run refuses

  bugP2
  brig-sh/brig#560 · Filter by author ananos opened on Oct 31, 2026 · M5

• brig secret create hangs when there is no login keychain, and doctor says the keychain is reachable

  bugP1security
  brig-sh/brig#559 · Filter by author ananos opened on Oct 31, 2026 · M4

• A Homebrew brig started outside a terminal session waits on a Gatekeeper prompt, and every later launch hangs

  bugP1
  brig-sh/brig#558 · Filter by author ananos opened on Oct 31, 2026 · M4

• Parallel boots fail image verification when cosign runs race on the TUF cache

  bugP1security
  brig-sh/brig#557 · Filter by author ananos opened on Oct 31, 2026 · M4

• Fix brig logs --follow --tail on nerdctl

  brig-sh/brig#550 · Filter by author pmoust opened on Oct 31, 2026

• First launcher run after a bypassed run fails with init socket EOF

  bug
  brig-sh/brig#541 · Filter by author pmoust opened on Oct 30, 2026
  2

• Fix brig logs --tail on nerdctl

  bug
  brig-sh/brig#539 · Filter by author pmoust opened on Oct 30, 2026

• Report the stage a failed run stopped at in the telemetry command event

  enhancement
  brig-sh/brig#530 · Filter by author ananos opened on Oct 29, 2026

• Check the Linux rootless prerequisites in brig doctor

  enhancement
  brig-sh/brig#529 · Filter by author ananos opened on Oct 29, 2026
  1

• Tests read the developer's brig config, so an attached policy fails unrelated tests

  bug
  brig-sh/brig#526 · Filter by author asapranidis opened on Oct 27, 2026

• Decide whether the conformance suite waits for DNS before its first control

  enhancementP2
  brig-sh/brig#523 · Filter by author margkeka opened on Oct 25, 2026 · M7

• feat(runtime): Accept only the microVM shims brig knows

  enhancementP2security
  brig-sh/brig#514 · Filter by author ananos opened on Oct 23, 2026 · M7

• Run Brig sessions from Herdr panes

  enhancementepicP2security
  brig-sh/brig#499 · Filter by author pmoust opened on Oct 11, 2026

• Let a guest ask for another task within its parent's grant

  enhancementP3security
  brig-sh/brig#498 · Filter by author pmoust opened on Oct 11, 2026

• Run the adapter on a remote Herdr host

  enhancementP3
  brig-sh/brig#497 · Filter by author pmoust opened on Oct 11, 2026

• Test the Herdr integration against a hostile guest on both backends

  enhancementP2security
  brig-sh/brig#496 · Filter by author pmoust opened on Oct 11, 2026