e7112db3d7
- remove codex auth mounts from opencode run/shell paths - reject opencode login and invalid backend values - harden opencode config writes against symlink clobbering - fix opencode build args and packages_extra handling - enforce cap-drop and read-only rootfs in runtime commands - reject dangerous runtime/build env overrides - update README and test docs to match actual behavior - extend regression coverage for backend safety and hardening
5 lines
80 B
Plaintext
5 lines
80 B
Plaintext
name=opencode-build
|
|
packages_extra=htop
|
|
agent=opencode
|
|
allow_host_network=false
|