boostsecurityio / boostsecurityio/lotp
[LOTP] Add .devcontainer
- Dominant language
- HTML
- Stars
- 164
- Forks
- 14
- PR merge metrics
- No merged PRs in 30d
Description
# .devcontainer spec
.devcontainer is supported by many [IDEs](https://containers.dev/supporting). Devcontainer allows to create container base environments. Aside from the container itself, the devcontainer spec includes many instructions which could let to RCE on dev workstation.
# Configuration files
```
devcontainer.json
.devcontainer/devcontainer.json
```
# Documentation
https://containers.dev/implementors/json_reference/
# Real-world example
- [General](https://containers.dev/implementors/json_reference/#general-properties)
- overrideCommand
- [Image args](https://containers.dev/implementors/json_reference/#image-specific)
- runArgs
- [Lifecycle scripts](https://containers.dev/implementors/json_reference/#lifecycle-scripts)
- initializeCommand
- onCreateCommand
- updateContentCommand
- postCreateCommand
- postStartCommand
- postAttachCommand
- [VS Code customization](https://containers.dev/supporting#visual-studio-code)
- extensions
- settings.json
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reviewing the .devcontainer specification and its devcontainer.json and .devcontainer/devcontainer.json configuration paths, then inspect the repository for existing patterns for adding LOTP coverage. Clarify which properties should be handled and what output is expected; the work is done when the agreed configuration cases are covered and verified consistently with those existing patterns.
Written by the indexing model from the issue text.
Assessment
- Domain
- security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100