Issues

• Routing parity: TS path-wide exec deny; Go matchEndpoint accepts endpoint subpaths

  Priority: P3Type: Bug
  ChainSafe/docker-socket-policy#49 · Filter by author abienkowski opened on Oct 2, 2026

• Rust extract_container_name treats empty segment as a container name (DELETE /containers/ is forwarded)

  Priority: P3Type: Bug
  ChainSafe/docker-socket-policy#48 · Filter by author abienkowski opened on Oct 2, 2026

• TypeScript: single-instance lock for the listening socket

  Type: Enhancement
  ChainSafe/docker-socket-policy#46 · Filter by author abienkowski opened on Sep 29, 2026
  1

• Policy is selected from the request body, not the caller: "per-service" enforcement has no caller identity

  Priority: P2Type: Enhancement
  ChainSafe/docker-socket-policy#39 · Filter by author abienkowski opened on Sep 23, 2026