Directory / AutoGen
AutoGen
DockerCommandLineCodeExecutor runs generated code in a Docker container instead of on the host. ExternalTermination stops a run from outside.
Lock this down first
Use the Docker executor, not the local one, and avoid host volume mounts.
Scorecard
| Criterion | Rating | Notes |
|---|---|---|
| Permission granularity | Unverified | Not confirmed in the docs we checked. |
| Human approval gates | Unverified | Not confirmed in the docs we checked. |
| Sandboxing | 2/3 | DockerCommandLineCodeExecutor runs code in a Docker container instead of the host. |
| Secrets handling | Unverified | Not confirmed in the docs we checked. |
| Audit logs | 2/3 | OpenTelemetry tracing via the runtime tracer provider. |
| Kill switch / interrupt | 3/3 | ExternalTermination stops a run from outside. |
| Network egress control | Unverified | Not confirmed in the docs we checked. |
Sources
- https://microsoft.github.io/autogen/stable/user-guide/core-user-guide/components/command-line-code-executors.html
- https://microsoft.github.io/autogen/stable/user-guide/agentchat-user-guide/tutorial/termination.html
- https://microsoft.github.io/autogen/stable/user-guide/core-user-guide/framework/telemetry.html
Vendor? Request a correction. We review corrections within 7 days.