holger-sandbox
Holger's scan sandbox: runs the scan worker over one artifact in a hardened rootless podman container (no network, read-only artifact and rootfs, capped tmpfs scratch, CPU/memory/pids limits, a wall-clock timeout, no capabilities, no-new-privileges, a non-root user) and hands back only its capped stdout. Fails closed, by name, when no engine is there.
Activity
- Latest release
- 2d ago
- Total releases
- 1
- Cadence
- —
- Last 12 months
- 1
Details
- License
- unknown
- First release
- Oct 28, 2026
Releases
| Version | Released | |
|---|---|---|
2.0.0
initial
|
2.0.0
initial
Dependencies (9)
+ 1 more |