Docker Sandbox

Use this when you want real container isolation instead of just validating a local script.

What it does

docker-sandbox runs a shell command inside a disposable Docker container with a hardened runtime profile inspired by Hermes:

drops all Linux capabilities with --cap-drop ALL
blocks privilege escalation with --security-opt no-new-privileges
limits process count with --pids-limit 256
mounts the container root filesystem read-only
provides ephemeral writable tmpfs mounts for /tmp, /var/tmp, and /run
disables networking by default with --network none
mounts the workspace or a caller-provided path at /workspace
returns structured JSON output with stdout, exit code, duration, image, and isolation status

Primary runner: