Hacker News new | ask | show | jobs
by red0point 1300 days ago
What do you do about security here?

Isn‘t automatically checking out and opening a repository after clicking a link quite a risky affair? Does it bypass the „do you trust this repo“ screen put up by VSCode?

1 comments

Hey there, really important question.

There's no security risk here. If you don't have the creds to access the repo, there is no way you can check out the code.

You can try this CodeLink to see how it works: codelink.dev/CKy5YDEZg. The link is to our open demo repo on GitHub. Click open in VS Code or JetBrains and you'll see the prompt in your editor to select a folder to check the code into, it'll then open the file and highlight the lines.