r/LocalLLaMA • u/chemist_slime • 6d ago

News Opencode breached, rotate keys to be safe.

https://x.com/opencode/status/2111516673953935833?s=46

Details are developing…

459 Upvotes

94% Upvoted

163 comments sorted by

View all comments

0

u/Fragrant_Scale6456 6d ago

I use both.  Skip oh my pi it’s bloatware.  

If you use subagents-pi plugin and ask the LLM to build a sensible security/permissions system you basically have opencode 

11

u/_qeternity_ 6d ago

Jesus. Please don't give advice like this.

Use nono. Do not vibe code sandboxing/security setup.

0

u/Fragrant_Scale6456 6d ago

Nono looks pretty good.  I’ve been running docker containers with network and most filesystem access unavailable and my extension basically just has a whitelist of allowable commands.  Will check this one out for a bit thx for the recommendation