Hacker News Reader

I just rub it in Docker to limit folder access and prevent it from being able to push to my remote repo. Indestructible.

Not a bad idea, thanks.

I use their official dev container config and limit access to a small list of domains too