diff --git a/codex-rs/BUILD.bazel b/codex-rs/BUILD.bazel
index 47324dbdca..85d5658f1a 100644
--- a/codex-rs/BUILD.bazel
+++ b/codex-rs/BUILD.bazel
@@ -1,3 +1,10 @@
 exports_files([
     "node-version.txt",
 ])
+
+filegroup(
+    name = "vendor_bubblewrap_sources",
+    srcs = glob([
+        "vendor/bubblewrap/**",
+    ]),
+)
diff --git a/codex-rs/linux-sandbox/BUILD.bazel b/codex-rs/linux-sandbox/BUILD.bazel
index aeef302ab3..48fbf37380 100644
--- a/codex-rs/linux-sandbox/BUILD.bazel
+++ b/codex-rs/linux-sandbox/BUILD.bazel
@@ -3,4 +3,7 @@ load("//:defs.bzl", "codex_rust_crate")
 codex_rust_crate(
     name = "linux-sandbox",
     crate_name = "codex_linux_sandbox",
+    build_script_data = [
+        "//codex-rs:vendor_bubblewrap_sources",
+    ],
 )