One Matching Glob Is Not a Sandbox Exemption for the Rest of the Line
A docker glob that matches one command is not a sandbox exemption for npm ci && docker build. Print the glob, split every part, and name who owns sandbox.excludedCommands before you file a hole.
Shinjae Kang
Read