diff --git a/docker/sandbox.sb b/docker/sandbox.sb
index 3373908d..91b37eb2 100644
--- a/docker/sandbox.sb
+++ b/docker/sandbox.sb
@@ -52,6 +52,8 @@
 
 (allow mach-lookup)
 (allow mach-register)
+(allow sysctl-read)
+(allow ipc-posix-shm-read-data (literal "apple.shm.notification_center"))
 
 ; Write
 (allow file-write*
@@ -76,6 +78,7 @@
 (allow system-socket)
 (allow network-outbound
     (path "/private/var/run/mDNSResponder")
+    (remote tcp4 "*:80")
     (remote tcp4 "*:443")
     (remote tcp4 "*:3128")
 )
@@ -99,6 +102,3 @@
 
 ; JSON language server
 (allow signal)
-
-; Uncomment when connected to Ottawa office network
-(system-network)
\ No newline at end of file
diff --git a/docker/test-macos.sh b/docker/test-macos.sh
index 4c23d4ea..9fc851f6 100755
--- a/docker/test-macos.sh
+++ b/docker/test-macos.sh
@@ -74,4 +74,13 @@ npm ci -ignore-script node-pty
 npm run lint
 npm run format
 npm run package
-FAST_TEST_RUN=1 npm run coverage -- --coverage-output "$PWD/coverage"
\ No newline at end of file
+
+# Download vscode
+mkdir -p .vscode-test 
+curl -O -L "https://code.visualstudio.com/sha/download?build=stable&os=darwin-universal"
+unzip download -d .vscode-test
+rm download
+
+# export npm_config_proxy="$HTTPS_PROXY"
+export npm_config_https_proxy="$HTTPS_PROXY"
+VSCODE_INSTALL="$(pwd)/.vscode-test/Visual Studio Code.app" CI=1 FAST_TEST_RUN=1 npm run coverage -- --coverage-output "$PWD/coverage"
\ No newline at end of file