fencesandbox/fence

Lightweight, container-free sandbox for running commands with network and filesystem restrictions

GoApache-2.0bubblewrapcode-securitycoding-agentlandlocksandbox

Stars

995

Δ 7d

Δ 30d

+26

Age

10 mo

Last push

5d ago

90-day star history

Where this sits in the catalog

CategoryRuntimes & sandboxes#12 of 18 by stars

RankingsNot in any top 20 today — see the rankings

Ranked by 👍 reactions. 34 open issues total, checked 2026-10-20.

Issue	👍	Comments	Opened
glob patterns in denyRead cause startup delay when walking large directories	2	0	7 mo
bubblewrap fails to mount gitconfig if it's a symlink	1	12	8 mo
Build fails in the nix linux build sandbox	1	5	6 mo
macOS: clipboard image access for apps like Pi requires undocumented macos.mach.lookup additions; please document or provide a preset	1	2	5 mo
Notifications for Sandbox Violations	1	1	4 mo