tuwtuwtuwtuw | Hacker News

[−]tuwtuwtuwtuw · 2026-10-10 Sat 17:36 UTC · link

There are many things that would be good to lock down. NPM install comes to mind.

I wonder if I will be able to integrate this with dev containers somehow, so my dev container could run in stricter isolation.

[−]tomrod · 2026-10-10 Sat 17:44 UTC · link

I've seen folks using the VS Code workspaces concept for this. It's a bit limited but a good step in the direction I prefer.

[−]tuwtuwtuwtuw · 2026-10-10 Sat 18:30 UTC · link

VS Code workspaces doesn't seem to offer any protection:

Maybe you use GitHub codespaces?

[−]tomrod · 2026-10-10 Sat 18:43 UTC · link

No, I did mean VS Code workspaces. Now I'm going to go down this rabbit hole to better understand the boundary limits :)

[−]tuwtuwtuwtuw · 2026-10-10 Sat 19:52 UTC · link

I did some reading of the docs and can't see anything in VS Code workspaces that would help.