awesome-repositories.com
博客
awesome-repositories.com

通过 AI 驱动的搜索,发现最优秀的开源仓库。

探索精选搜索开源替代品自托管软件博客网站地图
项目关于排名机制媒体报道MCP 服务器
法律隐私政策服务条款
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·

15 个仓库

Awesome GitHub RepositoriesExecution Sandboxes

Utilities that isolate command execution within specific contexts to prevent global state pollution.

Distinguishing note: None of the candidates matched; this focuses on task-scoped isolation of shell environments.

Explore 15 awesome GitHub repositories matching development tools & productivity · Execution Sandboxes. Refine with filters or upvote what's useful.

Awesome Execution Sandboxes GitHub Repositories

用 AI 发现最棒的仓库。我们将通过 AI 为您搜索最匹配的仓库。
  • daytonaio/daytonadaytonaio 的头像

    daytonaio/daytona

    72,416在 GitHub 上查看↗

    Daytona is a cloud-native development environment platform designed to orchestrate ephemeral, containerized workspaces. It provides a centralized system for managing reproducible coding environments as code, ensuring consistency across distributed teams by abstracting the underlying infrastructure. By utilizing declarative configuration, the platform automates the entire lifecycle of development sandboxes, from initial provisioning to resource governance. The platform distinguishes itself through its infrastructure-agnostic runner layer, which allows development environments to be deployed ac

    Enforces maximum vCPU, memory, and storage quotas for individual sandboxes to ensure efficient infrastructure utilization.

    TypeScriptagentic-workflowaiai-agents
    在 GitHub 上查看↗72,416
  • jdx/misejdx 的头像

    jdx/mise

    29,929在 GitHub 上查看↗

    Mise is a development environment orchestrator that manages software runtimes, environment variables, and task execution. It functions as a version manager and task runner, providing a unified interface to synchronize project-specific configurations and dependencies across different machines. By automating the installation and switching of tools, it ensures that development environments remain consistent and reproducible. The project distinguishes itself through a hierarchical configuration system that automatically discovers settings by traversing the directory tree. It uses shim-based comma

    Wraps command execution in a controlled environment context that injects specific variables and dependencies without polluting the global shell state.

    Rust
    在 GitHub 上查看↗29,929
  • nrwl/nxnrwl 的头像

    nrwl/nx

    28,939在 GitHub 上查看↗

    This project is a build orchestration engine and development toolkit designed for managing large-scale monorepos. It provides a unified workspace environment that maps project relationships and dependencies, enabling the system to perform intelligent impact analysis and execute only the tasks affected by specific code changes. The system distinguishes itself through a persistent daemon that monitors file changes for near-instant feedback and a content-addressable caching mechanism that stores task outputs to prevent redundant computation across local and remote environments. It further suppor

    Isolates task execution environments to ensure build consistency and prevent unauthorized file access.

    TypeScriptangularbuildbuild-system
    在 GitHub 上查看↗28,939
  • esengine/deepseek-reasonixesengine 的头像

    esengine/DeepSeek-Reasonix

    24,096在 GitHub 上查看↗

    DeepSeek-Reasonix is an autonomous software engineering framework and terminal-based AI IDE designed to coordinate large language models for complex programming tasks. It functions as a multi-session agent that utilizes a split planner and executor workflow to break down and implement technical objectives. The system distinguishes itself through a specialized focus on session optimization and extensibility. It employs prefix caching and append-only history to reduce token consumption and latency during long sessions. It further extends its capabilities by integrating external tool servers via

    Implements task sandboxing that restricts write access to a specific workspace and requires human approval.

    Goagentagent-frameworkai-agent
    在 GitHub 上查看↗24,096
  • kortix-ai/sunakortix-ai 的头像

    kortix-ai/suna

    19,388在 GitHub 上查看↗

    Suna is an orchestration platform designed for the deployment, management, and governance of autonomous AI agents. It provides a centralized system for defining agent behaviors and tool integrations, enabling the automation of complex business processes through a unified interface. The platform distinguishes itself by applying infrastructure-as-code principles to AI, utilizing version-controlled repositories to manage agent configurations, skills, and guardrails. It ensures secure and predictable operations by spawning ephemeral, isolated virtual machines for every individual task, preventing

    Spawns ephemeral, isolated virtual machines for every task to prevent state collisions and process interference.

    TypeScriptaiai-agentsllm
    在 GitHub 上查看↗19,388
  • langchain-ai/open-swelangchain-ai 的头像

    langchain-ai/open-swe

    9,988在 GitHub 上查看↗

    Open-SWE is an asynchronous software engineering agent and orchestrator designed to automate end-to-end coding tasks and pull request reviews. It functions as a middleware framework that coordinates long-running AI operations across multiple subagents, utilizing state persistence and human-in-the-loop oversight to manage complex workflows. The system is distinguished by its use of isolated remote Linux sandboxes for secure code execution and shell command processing. It features a webhook-driven integration platform that triggers automated engineering tasks via mentions and events in GitHub,

    Provides a standard protocol to extend the isolation layer with new remote sandbox backend providers.

    Python
    在 GitHub 上查看↗9,988
  • oumi-ai/oumioumi-ai 的头像

    oumi-ai/oumi

    8,858在 GitHub 上查看↗

    Oumi is a comprehensive large language model development platform designed for synthesizing data, fine-tuning models, and running performance evaluations. It serves as a unified environment for the entire model lifecycle, encompassing a training and fine-tuning suite, an evaluation framework, and tools for synthetic data generation and model distillation. The platform is distinguished by its iterative, failure-driven synthesis approach, which analyzes model weaknesses during evaluation to generate targeted training data. It utilizes an LLM-based judge framework to programmatically score respo

    Limits the creation and execution of projects and training runs based on organization-level plans.

    Pythondpoevaluationfine-tuning
    在 GitHub 上查看↗8,858
  • evomap/evolverEvoMap 的头像

    EvoMap/evolver

    8,744在 GitHub 上查看↗

    Evolver is a self-evolving AI agent framework that uses gene expression programming to autonomously improve agent behaviors through a continuous five-step loop of scanning, selecting, mutating, validating, and solidifying. It functions as an auditable evolution system that records every mutation and selection step, and can translate natural-language problems into executable Python code for automated grading and evaluation. The framework distinguishes itself through a distributed architecture that enables multiple agents to collaborate and share learned experiences across a network. It operate

    Periodically pulls validation tasks from a hub, runs proposer commands in a sandbox, and submits reports for reputation and credits.

    JavaScripta2aagent-evolutionagent-framework
    在 GitHub 上查看↗8,744
  • nebuly-ai/nebullvmnebuly-ai 的头像

    nebuly-ai/nebullvm

    8,338在 GitHub 上查看↗

    Nebullvm is an AI inference accelerator, GPU resource orchestrator, and performance optimization library for large language models. It functions as an optimization layer designed to lower operational costs by aligning model execution with underlying hardware architectures. The system maximizes cluster efficiency through real-time dynamic partitioning and elastic quotas for shared hardware resources. It employs alignment methods and techniques to reduce the hardware and data requirements necessary for tuning large language models. The project covers broad capability areas including AI infrast

    Adjusts hardware resource limits in real time based on demand to balance performance across concurrent workloads.

    Python
    在 GitHub 上查看↗8,338
  • superradcompany/microsandboxsuperradcompany 的头像

    superradcompany/microsandbox

    6,570在 GitHub 上查看↗

    Microsandbox is a runtime for creating and managing lightweight, hardware-isolated virtual machines — called sandboxes — that boot directly from standard OCI container images. Each sandbox runs as its own host process with a separate kernel, filesystem, and network stack, providing process-per-sandbox isolation. The project includes a command-line tool and multi-language SDKs (Rust, TypeScript, Python, Go) for programmatic lifecycle control, and it communicates with sandbox agents over Unix sockets using a CBOR-encoded protocol. What distinguishes Microsandbox is its combination of host-manag

    Resolves sandbox names to socket paths for establishing agent connections.

    Rust
    在 GitHub 上查看↗6,570
  • memodb-io/acontextmemodb-io 的头像

    memodb-io/Acontext

    3,035在 GitHub 上查看↗

    Acontext is an LLM orchestration backend and agent memory framework designed to manage session state and knowledge for AI agents. It functions as a context manager and orchestration layer that integrates model providers with a secure code sandbox and a zero-knowledge data store. The project is distinguished by its approach to knowledge distillation, capturing agent learnings as reusable Markdown skills and structured memory files. It provides a secure execution environment where shell commands and scripts run in isolated containers with the ability to mount these persistent skill files direct

    Attaches specific skill files to a sandbox filesystem so that scripts can access and execute learned knowledge.

    TypeScriptagentagent-development-kitagent-observability
    在 GitHub 上查看↗3,035
  • project-hami/hamiProject-HAMi 的头像

    Project-HAMi/HAMi

    3,028在 GitHub 上查看↗

    HAMi is a hardware orchestration and virtualization system designed to manage accelerators within Kubernetes. It functions as a device plugin that partitions physical hardware into isolated virtual slices, enabling multiple containers to share a single device through enforced memory limits and compute quotas. The project provides a virtualization manager and a heterogeneous compute scheduler that distributes tasks across diverse accelerator types. It uses packing and topology policies to optimize workload placement and allows for specific hardware targeting using unique device identifiers. T

    Applies hard memory and compute limits at runtime to prevent interfering workloads in shared environments.

    Goascendcambriconcncf
    在 GitHub 上查看↗3,028
  • ykdojo/claude-code-tipsykdojo 的头像

    ykdojo/claude-code-tips

    2,995在 GitHub 上查看↗

    This project is a collection of guides, toolkits, and scripts designed to optimize agentic coding workflows using large language models. It provides strategies for orchestrating AI agents, automating git patterns, and enhancing terminal-based development environments. The toolkit focuses on AI agent orchestration and git management, offering patterns for parallel codebase analysis and autonomous testing frameworks. It includes specialized workflows for conducting interactive pull request reviews and performing root cause analysis on continuous integration failures. The project covers a broad

    Isolates AI agent sessions within containers to prevent unsupervised research operations from affecting the host system.

    JavaScriptagenticagentic-aiagentic-coding
    在 GitHub 上查看↗2,995
  • agent-infra/sandboxagent-infra 的头像

    agent-infra/sandbox

    2,569在 GitHub 上查看↗

    This project provides secure, containerized infrastructure designed for autonomous agents, remote code execution, and cloud development. It functions as a sandboxed environment where AI agents and external processes can execute code, run shell commands, and manage files while remaining isolated from the host system. The system distinguishes itself by implementing the Model Context Protocol, allowing it to act as a standardized tool server that exposes browser and filesystem capabilities to compatible clients. It further integrates headless browser automation, enabling programmatic web navigat

    Provides a dedicated command-line interface to execute browser and tool calls from within a container.

    Pythonagentall-in-onebrowser
    在 GitHub 上查看↗2,569
  • vercel/workflowvercel 的头像

    vercel/workflow

    1,718在 GitHub 上查看↗

    Workflow is a platform for executing long-running, stateful processes that automatically persist progress and recover state after system interruptions. It functions as a durable orchestration engine designed to manage complex, multi-step asynchronous operations within distributed systems. The framework distinguishes itself through event-sourcing and checkpointing mechanisms that record execution steps as an immutable log, allowing for precise state reconstruction after failures. It provides sandboxed task isolation to run side-effect-heavy logic in restricted environments, ensuring that sensi

    Isolates task execution environments to prevent side effects from leaking into the main orchestration logic.

    TypeScript
    在 GitHub 上查看↗1,718
  1. Home
  2. Development Tools & Productivity
  3. Execution Sandboxes

探索子标签

  • Task Sandboxing4 个子标签Mechanisms for isolating task execution environments to prevent unauthorized file system access. **Distinct from Execution Sandboxes:** Distinct from Execution Sandboxes: focuses specifically on task-scoped file system isolation rather than general command execution sandboxing.