Post

This article asks what a container can block on its own when a dependency turns malicious, and tests nono, a capability-based sandbox that limits file and network access at runtime ➤ https://ku.bz/YdMc3KBZ6