How do i you decide whats safe to run

I recently ran Gossa on my home server using Docker, mounting it to a folder. Since I used rootless Docker, I was curious - if Gossa were to be a virus, would I have been infected? Have any of you had experience with Gossa?

  • exu@feditown.com
    link
    fedilink
    English
    arrow-up
    2
    ·
    5 months ago

    Even without escaping the container a lot of stuff can be done. Maybe the program includes a cryptominer or acts as a node in a botnet.

    There’s no way to be sure unless you verify the source yourself.