Skip to content

Releases: marklechner/ddash

Release list

v0.1.1

v0.1.1 Latest
Latest

Choose a tag to compare

View all tags
@marklechner marklechner released this 25 Feb 20:01
v0.1.1
9e8c244
This commit was signed with the committer’s verified signature.
marklechner Mark Lechner
GPG key ID: A5402E6FE5BA66FF
Verified
Learn about vigilant mode.

What's new

  • Environment scrubbing: Sensitive env vars (tokens, keys, passwords, cloud credentials) are automatically stripped before passing to the sandboxed process. Use --pass-env to bypass.
  • Fixed stdin piping: echo data | ddash run -- cat now works correctly.
  • Exit code forwarding: Sandboxed process exit codes are properly returned.
  • Signal forwarding: SIGINT/SIGTERM forwarded to child process for clean shutdown.
  • Improved help: All subcommands (run, trace, sandbox init) have full --help documentation.
Assets 2
Loading

v0.1.0

v0.1.0

Choose a tag to compare

View all tags
@marklechner marklechner released this 25 Feb 18:39
v0.1.0
74d40a0
This commit was signed with the committer’s verified signature.
marklechner Mark Lechner
GPG key ID: A5402E6FE5BA66FF
Verified
Learn about vigilant mode.

ddash v0.1.0

Lightweight process sandboxing for macOS. One command, zero setup.

Features

  • ddash run — sandbox any command with kernel-level isolation (no network, restricted writes)
  • ddash trace — trace a command's access patterns and suggest a minimal sandbox policy
  • ddash sandbox init -i — interactive policy builder
  • Per-project .ddash.json configuration
  • --allow-net, --deny-write, --profile flags for on-the-fly policy control

Install

brew install ddash

Or from source:

go install github.com/marklechner/ddash@latest
Loading