Skip to content

Block the SSH tunnel when extensions.allowed forbids Remote - SSH - #2290

Open
rclarey wants to merge 1 commit into
mainfrom
check-allowed-extensions
Open

rclarey wants to merge 1 commit into
mainfrom
check-allowed-extensions

Conversation

@rclarey

@rclarey rclarey commented Nov 5, 2026

Copy link
Copy Markdown
Contributor

Changes

Starting a tunnel needs the host's Remote - SSH extension (ms-vscode-remote.remote-ssh, or anysphere.remote-ssh in Cursor). When the extensions.allowed policy blocks it, the connect fails late and confusingly. Check the setting up front and show a modal error with a shortcut to the setting instead.

The check follows VS Code's precedence: an extension ID rule beats a publisher rule (including the microsoft special case), which beats the * wildcard.

Tests

unit tests added

Starting a tunnel needs the host's Remote - SSH extension
(ms-vscode-remote.remote-ssh, or anysphere.remote-ssh in Cursor). When the
`extensions.allowed` policy blocks it, the connect fails late and
confusingly. Check the setting up front and show a modal error with a
shortcut to the setting instead.

The check follows VS Code's precedence: an extension ID rule beats a
publisher rule (including the `microsoft` special case), which beats the
`*` wildcard.

Co-authored-by: Isaac <no-reply@databricks.com>
@rclarey
rclarey deployed to test-trigger-is November 5, 2026 14:12 — with GitHub Actions Active
@github-actions

github-actions Bot commented Nov 5, 2026

Copy link
Copy Markdown
Contributor

If integration tests don't run automatically, an authorized user can run them manually by following the instructions below:

Trigger:
go/deco-tests-run/vscode

Inputs:

  • PR number: 2290
  • Commit SHA: 8785e0d22016849c714018f94859f9c31dd885d6

Checks will be approved automatically on success.

@rclarey
rclarey deployed to test-trigger-is November 5, 2026 14:13 — with GitHub Actions Active
@rclarey
rclarey deployed to test-trigger-is November 5, 2026 14:13 — with GitHub Actions Active
@rugpanov

rugpanov commented Nov 5, 2026 •

Copy link
Copy Markdown
Contributor

🤖 Integration tests ✅ passed for 8785e0d2.
View run

This branch was successfully deployed

1 active deployment
test-trigger-is — 8785e0d2 Deployed Nov 5, 2026 by rclarey via Trigger Tests #2493
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants