OpenVSCode Server

Gitpod's minimal VS Code server. Extension host on the server; full support.

Planned Designed and scheduled, not yet built. Documented so the design can be reviewed early.

OpenVSCode Server is a lightly-patched VS Code that runs headless and serves the interface over HTTP. Like code-server, the extension host runs on the server, so scanning works fully.

Install

Uses Open VSX. From the Extensions view, or at image build time:

RUN /home/.openvscode-server/bin/openvscode-server \
      --install-extension vulnetix.vulnetix \
 && curl -fsSL https://cli.vulnetix.com/install.sh | sh

Ephemeral containers

If your deployment recreates the container per session, pre-install both the extension and the CLI in the image. Otherwise every session pays for a fresh extension install and a fresh CLI download before the first scan.

Persisting these across sessions is also effective:

  • ~/.cache/vulnetix — vulnerability lookups and cloned rule packs
  • ~/.vulnetix — credentials and configuration

Differences from code-server

Functionally none, for this extension. OpenVSCode Server tracks upstream VS Code more closely and ships fewer additions; both give the extension a Node host and a real filesystem, which is all it needs.

Didn't find what you needed? Tell us what's missing · Ask a question · Edit this page