- [bubblewrap](https://github.com/containers/bubblewrap) - [socat](http://www.dest-unreach.org/socat/) This ensures all scripts do not touch sensitive data, make sketchy requests or make dangerous file operations. If overkill, it can be a test check.
This ensures all scripts do not touch sensitive data, make sketchy requests or make dangerous file operations.
If overkill, it can be a test check.