Comment Comment by jy-tan Yes, Fence is designed for exactly this, the built-in `code` template already allowlists npm and PyPI registries:``` fence -t code pip install requests fence -t code npm install express ```This restricts writes to workspace + cache dirs, blocks reading credentials, limits network to allowlisted domains, and blocks dangerous commands (`rm -rf`, `npm publish`, etc). parent jy-tan 9 months ago
``` fence -t code pip install requests fence -t code npm install express ```
This restricts writes to workspace + cache dirs, blocks reading credentials, limits network to allowlisted domains, and blocks dangerous commands (`rm -rf`, `npm publish`, etc).