I've said this before, please use a container for your AI coding assistant(s)! It's not just about what it can do to your filesystem...
I've spoken to so many devs this week who aren't using a container!
Remember, it can also access all of your environment variables. API keys? Other secrets?
And then there's Slopsquatting, before you know it, you've got malware installed.
In a container, the blast radius is limited.
