docs/.devcontainer/team-b-secure/devcontainer.json at 863c33b8dfa204b05954849d8f6e7c3a7d92342e · github/docs · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
{
  "name": "Team B Secure Codespace Config",
  "build": {
    "dockerfile": "../Dockerfile.hardened",
    "args": { "VARIANT": "22" }
  },

  // Team B specific minimal features - even more restrictive
  "features": {
    "ghcr.io/devcontainers/features/github-cli:1": {
      "version": "2.40.1"
    }
  },

  "customizations": {
    "vscode": {
      "settings": {
        "terminal.integrated.shell.linux": "/bin/bash",
        "cSpell.language": ",en",
        "git.autofetch": false,
        // Team B ultra-secure settings
        "editor.formatOnSave": false,
        "git.confirmSync": true,
        "security.workspace.trust.enabled": true
      },
      // Team B ultra-minimal extensions
      "extensions": [
        "dbaeumer.vscode-eslint",
        "davidanson.vscode-markdownlint"
      ]
    }
  },

  "forwardPorts": [4000],

  "portsAttributes": {
    "4000": {
      "label": "Team B Review"
    }
  },

  // Maximum security - no automatic commands
  // All setup must be done manually

  "remoteUser": "node",

  // Minimal resource allocation for security
  "hostRequirements": {
    "memory": "4gb",
    "cpus": "2"
  }
}