OpenVSCode Server
Gitpod's minimal VS Code server. Extension host on the server; full support.
OpenVSCode Server is a lightly-patched VS Code that runs headless and serves the interface over HTTP. Like code-server, the extension host runs on the server, so scanning works fully.
Install
Uses Open VSX. From the Extensions view, or at image build time:
RUN /home/.openvscode-server/bin/openvscode-server \
--install-extension vulnetix.vulnetix \
&& curl -fsSL https://cli.vulnetix.com/install.sh | sh
Ephemeral containers
If your deployment recreates the container per session, pre-install both the extension and the CLI in the image. Otherwise every session pays for a fresh extension install and a fresh CLI download before the first scan.
Persisting these across sessions is also effective:
~/.cache/vulnetix— vulnerability lookups and cloned rule packs~/.vulnetix— credentials and configuration
Differences from code-server
Functionally none, for this extension. OpenVSCode Server tracks upstream VS Code more closely and ships fewer additions; both give the extension a Node host and a real filesystem, which is all it needs.