github.com/whiskeyjimbo/bento
Safe-by-default script sandbox in Go. Runs programs under default-deny OS isolation on Linux (bubblewrap + Landlock + seccomp): credential shielding, per-host network allowlisting via a host-side CONNECT proxy, resource limits, and a profile-then-grant consent flow. macOS support is planned.
View on Github
Activity
- Latest release
- 6d ago
- Total releases
- 6
- Cadence
- ~3 days
- Last 12 months
- 6
Reach
- Stars
- 0
Details
- First release
- Jul 27, 2026
| Version | Released | |
|---|---|---|
v0.3.1
patch
|
v0.3.1
patch
Dependencies (6)
|
|
v0.3.0
minor
|
v0.3.0
minor
Dependencies (6)
|
|
v0.2.1
patch
|
v0.2.1
patch
Dependencies (6)
|
|
v0.2.0
minor
|
v0.2.0
minor
Dependencies (6)
|
|
v0.1.1
patch
|
v0.1.1
patch
Dependencies (6)
|
|
v0.1.0
initial
|
v0.1.0
initial
Dependencies (6)
|