3 ms·

Then, run the agent vm-sandboxed, with tests mounted as a read-only directory, if your directory structure allows it.

• jsw97 7mo ago
  Or, less securely, hash the tests and check the hash with a hook, post tool use. Or a commit hook.