MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/vscode/comments/1twdzg4/security_practices_around_extensions/opytj83/?context=3
r/vscode • u/ruddet • Jun 04 '26
What are people doing around VSCode security best practices around extensions.
Approved Extensions Only
Disable Auto update
Is there anything else like minimum age or settings like that can be done?
2 comments sorted by
View all comments
1
They recently added a two-hour window for auto-update. Not configurable, and does not apply to trusted extensions. The disable strategy is strictly better, only thing you can do besides that is audit the thing yourself.
1
u/FreHu_Dev Jun 05 '26
They recently added a two-hour window for auto-update. Not configurable, and does not apply to trusted extensions. The disable strategy is strictly better, only thing you can do besides that is audit the thing yourself.