• nix98@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    2 hours ago

    This is where tools like bubblewrap (bwrap) come in. For opencode, I heavily limit what it can see and what is has access to. No access to my ssh keys or aws credentials or anything else.