macOS
brew install fencelocal Homebrew formula metadata
安装
brew install fencelocal Homebrew formula metadata
nix profile install nixpkgs#fencenixpkgs package indexes · pkgs/by-name/fe/fence/package.nix · 来源: api.github.com
概览
Lightweight sandbox for commands with network and filesystem restrictions
历史
Fence is a command sandbox and permission layer for running semi-trusted commands with default-deny network access and configurable filesystem and command rules.
The official README states that Fence moved from github.com/Use-Tusk/fence to github.com/fencesandbox/fence, with migration instructions for Homebrew tap users and Go installs. GitHub releases show an initial v0.1.0 release in December 2025 and frequent v0.1.x releases through June 2026.
The documentation positions Fence as a host-native sandbox rather than a container or VM. On macOS it uses sandbox-exec; on Linux it uses bubblewrap with Landlock and seccomp.
Fence's official README emphasizes AI coding-agent workflows and names Claude Code, Codex, Amp, Gemini CLI, GitHub Copilot, OpenCode, and Factory CLI as compatible commands. Packaging is still young, with Homebrew tap, Nix, curl installer, Go install, and source builds documented by upstream.
Basic usage wraps a command with network access blocked by default. Users can apply templates, monitor blocked requests, deny dangerous commands, configure filesystem read/write rules, and inspect the merged config with fence config show.
Fence is significant as a post-agent-era CLI package: instead of being an agent, package manager, or container runtime, it wraps arbitrary developer commands with reusable policy. That makes it relevant to package installation scripts, build scripts, CI jobs, and coding-agent sessions.
安全态势
没有找到 fence 的匹配本地密钥处理 manifest。Nucleus 软件包元数据仍在此发布,以便未来覆盖拥有稳定的软件包 URL。
在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
./fence.jsonc./fence.json~/.config/fence/fence.jsonc~/.config/fence/fence.json可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
fence | 可执行文件 | 已索引可执行文件 | 从本地可执行文件索引发现。 |
新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。
安装元数据
| 软件包键 | brew:fence |
|---|---|
| 版本 | 0.1.65 |
| 软件包管理器 | Homebrew |
| 主页 | https://github.com/fencesandbox/fence |
| 仓库 | https://github.com/fencesandbox/fence |
| 最后更新 | 2026-08-01T03:36:54Z |
| Pulse | updated |
| Bottle | 未记录 |
| 服务 | 未声明 |
源数据库匹配
匹配项来自外部软件包管理器索引,并与本地 Automic Vault 软件包链接分开显示。
fence
nix profile install nixpkgs#fence来源线索
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
View the package source record on GitHub.