Use VSCode's Workspace Trust features

[bwateratmsft]

microsoft/vscode#106488
microsoft/vscode#120251

VSCode is adding a way to denote whether a workspace is trusted or not, and to gate features based on that. We should investigate using these APIs to increase users' security.

Features that should require a trusted workspace:

• Tasks (always workspace)
• Debug (always workspace)
• Compose build / up (always workspace)
• Image build (always workspace)
• Command customization (sometimes workspace, need to inspect)
• Dockerode / DOCKER_HOST config (sometimes workspace, need to inspect)
• Scaffolding
• Azure image build, run file as task

Note: VSCode is probably going to implement trust in such a way that any settings from untrusted workspaces are not applied, which would take care of all of these except image build / compose up.

---

Features that require trust (of an image, not a file) but can't be implemented since it's not files:

• Image run (and compose up)

[bwateratmsft]

This probably would need to be applied to all of our tasks / launch config (debugging as a whole basically), and possibly also to Dockerfiles and docker-compose files, though I'm not sure off the top of my head what harm can be caused through them.

[bwateratmsft]

Obvious ones to me: tasks, command customization, debugging

[bwateratmsft]

I did some more research and it's definitely possible to leverage a malicious Dockerfile or compose document. A few examples of what could be done:

• Using the RUN directive to do crypto mining
• More generally, using RUN as a DoS
• Copying files in and then uploading them to dr-evil.com

[bwateratmsft]

Info for extension authors: microsoft/vscode#120251
Workspace trust in general: microsoft/vscode#106488

[bwateratmsft]

Tasks and debug are already handled by VSCode via microsoft/vscode#120251:

VS Code will prevent debugging in an untrusted workspace.

Similar to debugging, VS Code will prevent running tasks in an untrusted workspace.

I think all we'll need to do is gate certain commands (via when isWorkspaceTrusted clauses, along with enforcing it in code as well, per recommendation in the info) and settings (via restrictedConfigurations in the extension manifest).

[bwateratmsft]

This has been released in Docker extension version 1.16.0.