v0.1.0

First release.

scriptbox reads a shell script fully into an immutable copy at invoke, then
hands that to the real interpreter -- so editing a running script (by you, a
background process, or malware) can't change what executes past the current
line. Optional sha256 checksum pinning verifies integrity in-band.

POSIX only (macOS + Linux). See the README.

Install

brew install jhheider/tap/scriptbox
curl -fsSL https://heider.cc/scriptbox.sh | sh

Prebuilt binaries: scriptbox-{linux,macos}-{aarch64,x86_64}.tar.gz below.