Power Users/Automators 折腾/讨论/分享各种开源工具/脚本/自动化工作流👥 @zhetengsha_group📌 合集 https://t.me/zhetengsha/2🎁 恰饭 https://t.me/zhetengsha/957📢 广告投放 @xream @xream_botBuy ads: https://telega.io/c/zhetengshafeedId:55438372655431680+userId:62307599601855488http://telegram.zhetengsha.eu.orghttp://telegram.zhetengsha.eu.org/posts/5581http://telegram.zhetengsha.eu.org/posts/5581Fri, 08 May 2026 00:02:22 GMT<div class="image-list-container image-list-odd"> <button type="button" class="image-preview-button image-preview-wrap" popovertarget="modal-5581-0" popovertargetaction="show" aria-label="Open image preview: nono: 面向开发者与 AI Agent 的能力型安全沙箱工具• 基于 Linux Landlock 和 macOS Seatbelt 提供内核级沙箱，权限收敛后可继承到子进程，适合高安全执行场景• 支持 Agent multiplexing、快照回滚、审计日志与策略配置，方便同时运行多个 AI Agent 并保持可观测性• 内置凭证注入、网络过滤与 Sigstore 证明链能力，可直接衔接本地开发、CI、Kubernetes 和云端部署"> <img src="/static/https://cdn5.telesco.pe/file/ZKaZT2KLPlej9lUAGzyk2r0cfXdJUF1vHHEUcGxdO3-Y4K_qWlj8f9uPCJy_SHDX6tl698YaX9jQJUPAEYTQRWmkMZU7qn2rt8Emp6yEyNzhL_bPT5j332ZGw5ZHhPN2HX6xgLAYLlt-hBtTDrCJRKjikMjrfPzjEebg0qOSLSGGOu4Qf72ks0plSXtK2GbSrSRMvC0DLa3z50H0IMGB_6TpRSPw5v7GAWw9QLuW3ax8p7mJkRCG40YegjebBWglnjNppZzl_Sx86EODIkLWz0dXk4mDWSNPUsDCnYn5sN8ScmfBgwi-VJtnOqIxMBmydDJHZh1lRdJr6rUyD3W5NA.jpg" alt="nono: 面向开发者与 AI Agent 的能力型安全沙箱工具• 基于 Linux Landlock 和 macOS Seatbelt 提供内核级沙箱，权限收敛后可继承到子进程，适合高安全执行场景• 支持 Agent multiplexing、快照回滚、审计日志与策略配置，方便同时运行多个 AI Agent 并保持可观测性• 内置凭证注入、网络过滤与 Sigstore 证明链能力，可直接衔接本地开发、CI、Kubernetes 和云端部署" width="800" height="533" loading="eager" /> </button> <div class="modal" id="modal-5581-0" popover="auto" aria-label="Image preview"> <button type="button" class="modal__backdrop" popovertarget="modal-5581-0" popovertargetaction="hide" aria-label="Close image preview"></button> <button type="button" class="modal__close" popovertarget="modal-5581-0" popovertargetaction="hide" aria-label="Close image preview">×</button> <div class="modal__surface"> </div> </div> </div><u>nono: 面向开发者与 AI Agent 的能力型安全沙箱工具</u><br /><br />• 基于 Linux Landlock 和 macOS Seatbelt 提供内核级沙箱，权限收敛后可继承到子进程，适合高安全执行场景<br /><br />• 支持 Agent multiplexing、快照回滚、审计日志与策略配置，方便同时运行多个 AI Agent 并保持可观测性<br /><br />• 内置凭证注入、网络过滤与 Sigstore 证明链能力，可直接衔接本地开发、CI、Kubernetes 和云端部署<br /><br /><a href="https://github.com/always-further/nono" target="_blank" rel="noopener" title="https://github.com/always-further/nono">https://github.com/always-further/nono</a><br /><br /><img class="tg-emoji" src="/static/https://telegram.me/i/emoji/6327880277607583303.webp" alt="" loading="lazy" width="20" height="20" /> <a href="https://t.me/zhetengsha/2" target="_blank" rel="noopener" title="合集">合集</a> <img class="tg-emoji" src="/static/https://telegram.me/i/emoji/6021860481923288796.webp" alt="" loading="lazy" width="20" height="20" /> <a href="https://t.me/zhetengsha_group" target="_blank" rel="noopener" title="群组">群组</a> <img class="tg-emoji" src="/static/https://telegram.me/i/emoji/6327792445526380187.webp" alt="" loading="lazy" width="20" height="20" /> <a href="https://t.me/zhetengsha/957" target="_blank" rel="noopener" title="恰饭">恰饭</a> <img class="tg-emoji" src="/static/https://telegram.me/i/emoji/6330367862535884142.webp" alt="" loading="lazy" width="20" height="20" /><a href="https://t.me/xream_bot" target="_blank" rel="noopener" title="联系推广">联系推广</a><br /><br /><img class="tg-emoji" src="/static/https://telegram.me/i/emoji/6327836885552991740.webp" alt="" loading="lazy" width="20" height="20" /> <a href="/search/result?q=%23AI" title="#AI">#AI</a> <a href="/search/result?q=%23AI" title="#AI">#AI</a> <a href="/search/result?q=%23Agent" title="#Agent">#Agent</a> <a href="/search/result?q=%23%E5%AE%89%E5%85%A8%E6%B2%99%E7%AE%B1" title="#安全沙箱">#安全沙箱</a> <a href="/search/result?q=%23%E5%BC%80%E5%8F%91%E8%80%85%E5%B7%A5%E5%85%B7" title="#开发者工具">#开发者工具</a> <a href="/search/result?q=%23Rust" title="#Rust">#Rust</a> <a href="/search/result?q=%23GitHub" title="#GitHub">#GitHub</a> <a href="/search/result?q=%23Linux" title="#Linux">#Linux</a> <a href="/search/result?q=%23macOS" title="#macOS">#macOS</a> <a href="/search/result?q=%23Sigstore" title="#Sigstore">#Sigstore</a> <a href="/search/result?q=%23%E4%BA%91%E5%8E%9F%E7%94%9F" title="#云原生">#云原生</a>http://telegram.zhetengsha.eu.org/posts/4863http://telegram.zhetengsha.eu.org/posts/4863Wed, 18 Feb 2026 01:00:00 GMT<u>GitHub Agentic Workflows: 在 GitHub Actions 里跑 AI 代理的仓库自动化框架</u><br /><br />• 用 Copilot、Claude、OpenAI Codex 执行定时或事件触发的工作流, 自动分拣 Issue、分析 CI 失败、维护文档与测试<br /><br />• 安全优先的内建 guardrails: 默认只读权限, 写操作需通过 safe outputs 显式批准, 并配合沙箱执行、工具白名单与网络隔离<br /><br />• 用简单的 Markdown / 自然语言定义工作流, 搭配 gh aw CLI 生成带 .lock.yml 的可复现执行, 作为现有 CI/CD 的 Continuous AI 增强<br /><br /><a href="https://github.github.com/gh-aw" target="_blank" rel="noopener" title="https://github.github.com/gh-aw">https://github.github.com/gh-aw</a><br /><br /><a href="/search/result?q=%23GitHub" title="#GitHub">#GitHub</a> <a href="/search/result?q=%23GitHubActions" title="#GitHubActions">#GitHubActions</a> <a href="/search/result?q=%23Copilot" title="#Copilot">#Copilot</a> <a href="/search/result?q=%23Claude" title="#Claude">#Claude</a> <a href="/search/result?q=%23OpenAI" title="#OpenAI">#OpenAI</a> <a href="/search/result?q=%23Codex" title="#Codex">#Codex</a> <a href="/search/result?q=%23AI" title="#AI">#AI</a> <a href="/search/result?q=%23%E4%BB%93%E5%BA%93%E8%87%AA%E5%8A%A8%E5%8C%96" title="#仓库自动化">#仓库自动化</a> <a href="/search/result?q=%23CI" title="#CI">#CI</a> <a href="/search/result?q=%23CD" title="#CD">#CD</a> <a href="/search/result?q=%23%E5%AE%89%E5%85%A8" title="#安全">#安全</a> <a href="/search/result?q=%23%E5%BC%80%E5%8F%91%E8%80%85%E5%B7%A5%E5%85%B7" title="#开发者工具">#开发者工具</a> <a href="/search/result?q=%23%E8%87%AA%E5%8A%A8%E5%8C%96%E5%B7%A5%E4%BD%9C%E6%B5%81" title="#自动化工作流">#自动化工作流</a> <a href="/search/result?q=%23MicrosoftResearch" title="#MicrosoftResearch">#MicrosoftResearch</a> <a href="/search/result?q=%23GitHubNext" title="#GitHubNext">#GitHubNext</a><a class="tgme_widget_message_link_preview" href="https://github.github.io/gh-aw/" target="_blank" rel="noopener" title="Write repository automation workflows in natural language using markdown files and run them as GitHub Actions. Use AI agents with strong guardrails to automate your development workflow."> <div class="link_preview_site_name accent_color">GitHub Agentic Workflows</div> <img class="link_preview_image" alt="Home | GitHub Agentic Workflows" src="/static/https://cdn4.telesco.pe/file/pjoLxOdw0_zXR575fL2NjtQPqEWAlsg8rw3Z7YhbYjBmtaS9faaF8ApafobY9NM2TvuAC3qeatEUBZQs0HyL5Wd38v1KLt6A-kQ9aLItJidKUZ-FzBCIp_5vPu4600VUrkdpJyvzpuaZIz1B-ussz-6UBECsy2Ops1rKOmOkpeDK_2rAaTIgrfgPedeuCTQ5DVnss1VS28E0F3LIn0IbkRol_Jxh3iY5x4CbiHGyCPwb6wwu4FnblmEEC-Y5iJ0BQXAvueFPSqlq5wvBB7WD8hP7vJE_fMlAWje_6Gp67rZyzGDNTcFexWMTQ9mWsWMlsr5v8fXRdHGTmzz-gLkt0Q.jpg" width="1200" height="630" loading="eager" /> <div class="link_preview_title">Home | GitHub Agentic Workflows</div> <div class="link_preview_description">Write repository automation workflows in natural language using markdown files and run them as GitHub Actions. Use AI agents with strong guardrails to automate your development workflow.</div> </a>