1+ {
2+ // For format details, see https://aka.ms/devcontainer.json.
3+ // This is a Dev Container for Github Codespaces based on eth-security-toolbox image created by Trail of Bits
4+ // check https://github.com/trailofbits/eth-security-toolbox for more information.
5+ "name" : " codespaces" ,
6+
7+ // Build configuration - uses the eth-security-toolbox image
8+ "image" : " ghcr.io/trailofbits/eth-security-toolbox:nightly" ,
9+ // Configure tool-specific properties for VS Code
10+ "customizations" : {
11+ "vscode" : {
12+ // Specialized extensions for smart contract auditing and development
13+ "extensions" : [
14+ // check out https://marketplace.visualstudio.com/items?itemName=tintinweb.ethereum-security-bundle for more information
15+ " tintinweb.ethereum-security-bundle" , // includes what is listed above ^
16+ " tintinweb.vscode-ethover" ,
17+ " trailofbits.weaudit" ,
18+ " trailofbits.contract-explorer" ,
19+ " trailofbits.sarif-explorer"
20+ ],
21+ // VS Code settings optimized for auditing workflows
22+ "settings" : {
23+ // Security settings - killswitch for automated tasks
24+ "task.autoDetect" : " off" , // Disable automatic task detection
25+ "task.problemMatchers.autoDetect" : " off" , // Disable automatic problem matchers
26+
27+ // Trust and security configuration
28+ "security.workspace.trust.enabled" : false , // Trust no one by default
29+
30+ // Privacy settings - killswitch for telemetry
31+ "telemetry.telemetryLevel" : " off" , // Disable all telemetry collection
32+
33+ // Terminal configuration
34+ "terminal.integrated.defaultProfile.linux" : " bash"
35+ }
36+ }
37+ },
38+
39+ // Sets a workspace path entirely hardened within the container
40+ "workspaceFolder" : " /workspace"
41+ }
0 commit comments