zerobox 0.2.2

Sandbox any command with file, network, and credential controls.
{
  "$schema": "./schema.json",
  "description": "Deny access to credentials, tokens, and cloud keys.",
  "deny_read": [
    "$HOME/.ssh",
    "$HOME/.gnupg",
    "$HOME/.aws",
    "$HOME/.azure",
    "$HOME/.config/gcloud",
    "$HOME/.gcloud",
    "$HOME/.kube",
    "$HOME/.docker",
    "$HOME/.git-credentials",
    "$HOME/.netrc",
    "$HOME/.npmrc",
    "$HOME/.vault-token",
    "$HOME/.credentials",
    "$HOME/.secrets",
    "$HOME/.keys",
    "$HOME/.pki",
    "$HOME/.terraform.d",
    "$HOME/.config/op"
  ],
  "deny_write": [
    "$HOME/.ssh",
    "$HOME/.gnupg",
    "$HOME/.aws",
    "$HOME/.azure",
    "$HOME/.config/gcloud",
    "$HOME/.gcloud",
    "$HOME/.kube",
    "$HOME/.docker",
    "$HOME/.git-credentials",
    "$HOME/.netrc",
    "$HOME/.npmrc",
    "$HOME/.vault-token",
    "$HOME/.credentials",
    "$HOME/.secrets",
    "$HOME/.keys",
    "$HOME/.pki",
    "$HOME/.terraform.d",
    "$HOME/.config/op"
  ]
}