5 ms·
It's time for all developers to learn about devcontainers and use them consistently. They're super easy to setup and run and would protect from most of what thi
by TimJRobinson 2mo ago
It's time for all developers to learn about devcontainers and use them consistently. They're super easy to setup and run and would protect from most of what this worm does. https://code.visualstudio.com/docs/devcontainers/containers https://code.visualstudio.com/docs/devcontainers/containers is the best guide to get started if you use vscode.
- acdha 2mo agoThey help only to the extent that you have completely isolated credentials: the hard part isn’t the container, it’s things like fastidiously using separate least-privilege credentials everywhere and not using tools or editor integrations which don’t support that style of work. Once you map your GitHub or AWS token into a container, it’s no longer useful as a security boundary.