Jim extensions

[jimgar]

Alphabetises the extensions list and adds some new ones.

Added

• charliermarsh.ruff
  • We've moved more towards using ruff instead of black and isort etc for formatting and linting Python
• DavidAnson.vscode-markdownlint
  • Lints md files
• eamodio.gitlens
  • Adds some Git stuff, including ability to see blames within files
• REditorSupport.r
  • Basic R support
• REditorSupport.r-syntax
  • R syntax highlighting

[github-actions]

🔒 Trivy Security Scan Results

Status: ⚠️ Vulnerabilities found (see details in artifacts)
Vulnerabilities Found: 137 critical/high severity issues

⚠️ Action Required: Critical or high severity vulnerabilities detected.

Top 10 Critical/High Severity Vulnerabilities:

Type	Package	Vulnerability	Severity	Fixed Version
gobinary	stdlib	CVE-2024-24790	CRITICAL	1.21.11, 1.22.4
gobinary	stdlib	CVE-2024-24790	CRITICAL	1.21.11, 1.22.4
gobinary	stdlib	CVE-2024-24790	CRITICAL	1.21.11, 1.22.4
gobinary	stdlib	CVE-2024-24790	CRITICAL	1.21.11, 1.22.4
node-pkg	grunt	CVE-2020-7729	HIGH	1.3.0
node-pkg	grunt	CVE-2022-1537	HIGH	1.5.3
node-pkg	npm	CVE-2018-7408	HIGH	5.7.1
node-pkg	npm	CVE-2019-16775	HIGH	6.13.3
node-pkg	npm	CVE-2019-16776	HIGH	6.13.3
node-pkg	npm	CVE-2019-16777	HIGH	6.13.4

... and 4 more issues.

📊 Scan Details

• Image: ghcr.io/smartdatafoundry/devcontainer
• Scan Date: 2025-09-23 15:14:35 UTC
• Total Vulnerabilities: 137

Action Run: view run
Trivy Report: view report

[github-actions]

🔒 Trivy Security Scan Results

Status: ⚠️ Vulnerabilities found (see details in artifacts)
Vulnerabilities Found: 137 critical/high severity issues

⚠️ Action Required: Critical or high severity vulnerabilities detected.

Top 10 Critical/High Severity Vulnerabilities:

Type	Package	Vulnerability	Severity	Fixed Version
gobinary	stdlib	CVE-2024-24790	CRITICAL	1.21.11, 1.22.4
gobinary	stdlib	CVE-2024-24790	CRITICAL	1.21.11, 1.22.4
gobinary	stdlib	CVE-2024-24790	CRITICAL	1.21.11, 1.22.4
gobinary	stdlib	CVE-2024-24790	CRITICAL	1.21.11, 1.22.4
node-pkg	grunt	CVE-2020-7729	HIGH	1.3.0
node-pkg	grunt	CVE-2022-1537	HIGH	1.5.3
node-pkg	npm	CVE-2018-7408	HIGH	5.7.1
node-pkg	npm	CVE-2019-16775	HIGH	6.13.3
node-pkg	npm	CVE-2019-16776	HIGH	6.13.3
node-pkg	npm	CVE-2019-16777	HIGH	6.13.4

... and 4 more issues.

📊 Scan Details

• Image: ghcr.io/smartdatafoundry/devcontainer
• Scan Date: 2025-09-23 21:06:31 UTC
• Total Vulnerabilities: 137

Action Run: view run
Trivy Report: view report

[jimgar]

Ok I got a bit carried away and made some more significant changes...

I am going to need the VS Code Vim extension for the TRE. Lots of basic keyboard shortcuts don't map for me, either because the browser reserves them (Guacamole) or the Mac keyboard vs Linux issue. I always use Vim keybinds in my editors though, so doing that in the TRE would allow me to get around a lot of those keyboard annoyances while coding.

The only problem is: Extensions that get installed will be on by default for anyone that uses the devcontainer. I don't think it's nice to ask everyone else to turn the Vim extension off every single time they launch the container. So instead, we can download the extension, same as what you did for container-tools. Once the image is in the TRE I can extract and install the Vim extension. The great thing is, the devcontainer will inherit the Vim extension from my system VS Code.

To make this happen I generalised the .devcontainer/vscode-init/02-download-container-tools-extension.sh script, replacing it with .devcontainer/vscode-init/02-download-extensions.sh. It's the same idea as for installing extensions: A text file with a list of the extensions gets parsed and then each is downloaded.

[github-actions]

🔒 Trivy Security Scan Results

Status: ⚠️ Vulnerabilities found (see details in artifacts)
Vulnerabilities Found: 143 critical/high severity issues

⚠️ Action Required: Critical or high severity vulnerabilities detected.

Top 10 Critical/High Severity Vulnerabilities:

Type	Package	Vulnerability	Severity	Fixed Version
gobinary	stdlib	CVE-2024-24790	CRITICAL	1.21.11, 1.22.4
gobinary	stdlib	CVE-2024-24790	CRITICAL	1.21.11, 1.22.4
gobinary	stdlib	CVE-2024-24790	CRITICAL	1.21.11, 1.22.4
gobinary	stdlib	CVE-2024-24790	CRITICAL	1.21.11, 1.22.4
node-pkg	grunt	CVE-2020-7729	HIGH	1.3.0
node-pkg	grunt	CVE-2022-1537	HIGH	1.5.3
node-pkg	npm	CVE-2018-7408	HIGH	5.7.1
node-pkg	npm	CVE-2019-16775	HIGH	6.13.3
node-pkg	npm	CVE-2019-16776	HIGH	6.13.3
node-pkg	npm	CVE-2019-16777	HIGH	6.13.4

... and 4 more issues.

📊 Scan Details

• Image: ghcr.io/smartdatafoundry/devcontainer
• Scan Date: 2025-09-24 15:47:58 UTC
• Total Vulnerabilities: 143

Action Run: view run
Trivy Report: view report

[DevNiall]

Great stuff, have rebased against main to inherit installation of R

[DevNiall]

Merging

[github-actions]

🔒 Trivy Security Scan Results

Status: ⚠️ Vulnerabilities found (see details in artifacts)
Vulnerabilities Found: 143 critical/high severity issues

⚠️ Action Required: Critical or high severity vulnerabilities detected.

Top 10 Critical/High Severity Vulnerabilities:

Type	Package	Vulnerability	Severity	Fixed Version
gobinary	stdlib	CVE-2024-24790	CRITICAL	1.21.11, 1.22.4
gobinary	stdlib	CVE-2024-24790	CRITICAL	1.21.11, 1.22.4
gobinary	stdlib	CVE-2024-24790	CRITICAL	1.21.11, 1.22.4
gobinary	stdlib	CVE-2024-24790	CRITICAL	1.21.11, 1.22.4
node-pkg	grunt	CVE-2020-7729	HIGH	1.3.0
node-pkg	grunt	CVE-2022-1537	HIGH	1.5.3
node-pkg	npm	CVE-2018-7408	HIGH	5.7.1
node-pkg	npm	CVE-2019-16775	HIGH	6.13.3
node-pkg	npm	CVE-2019-16776	HIGH	6.13.3
node-pkg	npm	CVE-2019-16777	HIGH	6.13.4

... and 4 more issues.

📊 Scan Details

• Image: ghcr.io/smartdatafoundry/devcontainer
• Scan Date: 2025-09-24 18:58:33 UTC
• Total Vulnerabilities: 143

Action Run: view run
Trivy Report: view report