logoalt Hacker News

ashishb • yesterday at 11:30 PM • 1 reply • view on HN

> Granting terminal full disk access grants arbitrary scripts full disk access.

Indeed, I run all dev tools including coding agents inside sandbox now

https://github.com/ashishb/amazing-sandbox


Replies

jackjeff • today at 7:02 AM

I do the same but I rely on devcontainers because editors like vscode, zed, etc… provide native support. It seems easier to use than asb.

If you open a project using a devcontainer it prompts you to build one. As long as you install all the tools you need in it, it just works.

Orbstack is much nicer than Docker to host the containers.