junior/devin-in-a-box-kit repository overview

⁠Devin in a Box kit

A Docker Sandboxes⁠ mixin for the built-in devin agent. This is an OCI kit artifact, not a container image: use it with sbx, not docker pull.

⁠Usage

sbx run devin --kit junior/devin-in-a-box-kit:latest ~/src/your-repo

Kits apply when a sandbox is created. Pin a release tag such as :0.3.0 for repeatable sandboxes.

⁠What it adds

• DEVIN_MODEL=swe-1.6, which Devin uses as the default for --model (override with --env DEVIN_MODEL=your-model).
• A complete Devin config that keeps background self-updates off, skips the first-run wizard and the workspace-trust prompt, and disables commit attribution. One-shot prompts need no extra flags:

sbx exec devin-your-repo -- devin --print -- 'Summarize this repository.'

⁠Verify the signature

Each release is signed in GitHub Actions with keyless Sigstore signing and carries SLSA provenance.

sbx kit verify \
  --certificate-identity-regexp '^https://github\.com/junior/devin-in-a-box/\.github/workflows/publish\.yml@refs/tags/v' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  junior/devin-in-a-box-kit:latest

⁠More

• Docker Sandboxes section of the README⁠, including how the built-in agent keeps your Devin key on the host
• Kit source⁠

MIT licensed. Devin is a product of Cognition; this community project is not affiliated with or endorsed by Cognition.