ka-ishimoto 92a7dce46f Fix false positive CVE alerts by setting package name to code-oss-dev (#7839) ...

The VS Code build process sets the bundled lib/vscode/package.json name to "code-server" (from product.json nameShort), causing vulnerability scanners to misidentify it and flag non-applicable CVEs. Override the name to "code-oss-dev" in build-release.sh after merging package.json.
Fixes #7071

Signed-off-by: ka-ishimoto <ka-ishimoto@kddi.com>

2026-06-10 11:59:45 -08:00

..

build-code-server.sh

Remove deprecated --link (#6018)

2023-02-13 16:52:48 -06:00

build-lib.sh

feat: add test for get_nfpm_arch

2021-09-17 16:07:03 -07:00

build-packages.sh

Fix top level release package dir

2026-03-30 14:36:21 -08:00

build-release.sh

Fix false positive CVE alerts by setting package name to code-oss-dev (#7839)

2026-06-10 11:59:45 -08:00

build-vscode.sh

Optimize builtin copilot extension (#7757)

2026-04-16 00:07:15 -08:00

clean.sh

Add vscode via vendor package.

2021-09-15 14:54:33 -04:00

code-server-nfpm.sh

Add NPM package, debs, rpms and refactor CI/build process

2020-05-06 20:25:52 -04:00

code-server-user.service

Bundle systemd system unit

2020-08-27 13:20:21 -04:00

code-server.sh

fix: add node to path (#5598)

2022-09-29 18:02:53 -05:00

code-server@.service

Fix path of systemd system service in nfpm

2020-08-31 05:22:52 -04:00

nfpm.yaml

Use VS Code packaging for releases (#7721)

2026-03-27 17:08:35 -08:00

npm-postinstall.sh

Use VS Code packaging for releases (#7721)

2026-03-27 17:08:35 -08:00

update-repo.sh

Fix Helm chart version bump script

2026-06-02 11:29:19 -08:00

update-vscode.sh

Still finish checklist if a step failed

2026-05-28 11:04:14 -08:00