snekbox
snekbox copied to clipboard
Easy, safe evaluation of arbitrary Python code
A long time ago I made a rough draft of a filter: ``` seccomp_string: "KILL {" seccomp_string: " execve," seccomp_string: " execveat," seccomp_string: " shmget," seccomp_string: " shmat," seccomp_string: "...
Bumps the ci-dependencies group with 2 updates in the / directory: [getsentry/action-release](https://github.com/getsentry/action-release) and [coverallsapp/github-action](https://github.com/coverallsapp/github-action). Updates `getsentry/action-release` from 1 to 3 Release notes Sourced from getsentry/action-release's releases. 3.0.0 Version 3.0.0 contains...
Bumps the docker-dependencies group with 1 update: python. Updates `python` from 3.13-slim-bookworm to 3.14-slim-bookworm [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't...
Bumps the ci-dependencies group with 2 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact). Updates `actions/upload-artifact` from 4 to 5 Release notes Sourced from actions/upload-artifact's releases. v5.0.0 What's Changed BREAKING CHANGE: this update supports...
This PR makes a start at decoupling the specific setup of snekbox PyDis uses and snekbox as a standalone application. This is done by building a basic snekbox application that...
Tests all _just passed_ locally. The nsjail bump does take us through a [major version](https://github.com/google/nsjail/releases/tag/3.0) update, but doesn't seem breaking for us.