This repository was archived by the owner on Feb 6, 2026. It is now read-only.
Repository navigation
This repository was archived by the owner on Feb 6, 2026. It is now read-only.
Take steps to prevent file access from Sandbox #22
Description
Activity
Letting it run with reduced rights is still beneficial, but it can not prevent the bot from reading it's own token. Though adding a safeguard that blocks all executed code from reading a file in the bot directory would be possible.
Leaving a note to close and split this into another issue.
Previous issue: #15
Seems like it's not enough.
I'd suggest running the app with a linux user that only has read/execute access to what it needs to.