this post was submitted on 16 Aug 2024
20 points (100.0% liked)

VS Code

773 readers
1 users here now

founded 1 year ago
MODERATORS
 

Do you know the .vscode/tasks.json file? You can add it to your project, and @vscode will run your configured commands automatically when you open the project ✨

I use this for the Inertia Table so it starts the web server and Vite without me having to open terminals for them 👌

#Laravel #PHP #JS #coding

you are viewing a single comment's thread
view the rest of the comments
[–] mumblerfish@lemmy.world 12 points 2 months ago (6 children)

Hm, yeah ok, should really be careful with that "I trust the developers of this repo" button (or whatever it says)

[–] Lodra@programming.dev 5 points 2 months ago* (last edited 2 months ago) (5 children)

100%

I know a guy that considers git pre-commit hooks a form of code injection and thus a security risk. So he disables them on repos he works with. And to be fair, it’s absolutely a viable vector for attacking developer machines. I think a tasks.json fits into that exact same bucket.

These kinds of automations are suuuper useful and I do like to use them. But also review a code base before cloning!

[–] expr@programming.dev 1 points 2 months ago

Yeah, it's a little insane to me to automatically run code that exists in a file in the current directory, by default.

Like there's a reason that direnv requires you to execute direnv allow if you enter a directory with an .envrc that you hadn't previously approved.

I don't know of any other editor that has this as standard behavior, and for good reason.

load more comments (4 replies)
load more comments (4 replies)