Tag

vscode-extensions

Safeguard articles tagged "vscode-extensions" — guides, analysis, and best practices for software supply chain and application security.

1 article

Application Security

Building Secure VS Code Extensions: A Developer's Guide

VS Code extensions run as trusted Node.js code with full disk and network access and no permission model to fall back on. Here is how to build one that does not become the next supply chain incident.

Jul 8, 20266 min read