boostsecurityio / boostsecurityio/lotp

[LOTP] Add .devcontainer

Open
#82 0 comments 0 reactions 0 assignees View on GitHub
idea
Dominant language
HTML
Stars
164
Forks
14
PR merge metrics
No merged PRs in 30d

Description

# .devcontainer spec

.devcontainer is supported by many [IDEs](https://containers.dev/supporting). Devcontainer allows to create container base environments. Aside from the container itself, the devcontainer spec includes many instructions which could let to RCE on dev workstation.

# Configuration files

```
devcontainer.json
.devcontainer/devcontainer.json
```

# Documentation
https://containers.dev/implementors/json_reference/

# Real-world example

- [General](https://containers.dev/implementors/json_reference/#general-properties)
- overrideCommand
- [Image args](https://containers.dev/implementors/json_reference/#image-specific)
- runArgs
- [Lifecycle scripts](https://containers.dev/implementors/json_reference/#lifecycle-scripts)
- initializeCommand
- onCreateCommand
- updateContentCommand
- postCreateCommand
- postStartCommand
- postAttachCommand
- [VS Code customization](https://containers.dev/supporting#visual-studio-code)
- extensions
- settings.json

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing the .devcontainer specification and its devcontainer.json and .devcontainer/devcontainer.json configuration paths, then inspect the repository for existing patterns for adding LOTP coverage. Clarify which properties should be handled and what output is expected; the work is done when the agreed configuration cases are covered and verified consistently with those existing patterns.

Written by the indexing model from the issue text.

Assessment

Domain
security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.