diff --git a/docker/sandbox.sb b/docker/sandbox.sb
index 3373908d5..91b37eb2f 100644
--- a/docker/sandbox.sb
+++ b/docker/sandbox.sb
@@ -52,6 +52,8 @@
 
 (allow mach-lookup)
 (allow mach-register)
+(allow sysctl-read)
+(allow ipc-posix-shm-read-data (literal "apple.shm.notification_center"))
 
 ; Write
 (allow file-write*
@@ -76,6 +78,7 @@
 (allow system-socket)
 (allow network-outbound
     (path "/private/var/run/mDNSResponder")
+    (remote tcp4 "*:80")
     (remote tcp4 "*:443")
     (remote tcp4 "*:3128")
 )
@@ -99,6 +102,3 @@
 
 ; JSON language server
 (allow signal)
-
-; Uncomment when connected to Ottawa office network
-(system-network)
\ No newline at end of file
diff --git a/docker/test-macos.sh b/docker/test-macos.sh
index 4c23d4ea3..cd170dae4 100755
--- a/docker/test-macos.sh
+++ b/docker/test-macos.sh
@@ -74,4 +74,10 @@ npm ci -ignore-script node-pty
 npm run lint
 npm run format
 npm run package
-FAST_TEST_RUN=1 npm run coverage -- --coverage-output "$PWD/coverage"
\ No newline at end of file
+
+# Download vscode
+curl -S -L "https://code.visualstudio.com/sha/download?build=stable&os=darwin-universal" | tar -xz - -C .vscode-test
+
+export npm_config_proxy="localhost:3128"
+export npm_config_https_proxy="localhost:3128"
+CI=0 FAST_TEST_RUN=1 npm run coverage -- --coverage-output "$PWD/coverage"
\ No newline at end of file