
Research
/Security News
Trivy Under Attack Again: Widespread GitHub Actions Tag Compromise Exposes CI/CD Secrets
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.
vscode-docs
Advanced tools
Visual Studio Code 是微软推出的跨平台编辑器。它采用经典的VS的UI布局,功能强大,扩展性很强。但是 Visual Studio Code 暂时没有中文手册,对于不太熟悉英文的同学会比较吃力。
本项目的初衷是为想使用或者正在使用 Visual Studio Code 的同学提供一个中文手册,方便大家学习使用这个优秀的工具,提高程序开发效率和质量!
###第一阶段
先将 Visual Studio Code Docs 的内容按现有的目录结构翻译成中文,其中:
md 目录下,采用 md 格式。images目录下,后续图片资源会统一托管到七牛云存储主目录-副目录-编号的格式命名。####文件命名规则
翻译名称(原英文名)。所有的空格都用 - 代替,注意单词首字母大写。例如:https://code.visualstudio.com/docs/editor/whyvscode 这篇文档,对应 editor 这个文件夹下的 WhyVsCode.md 文件。
###第二阶段
根据翻译文档,制作成类似在线手册或者与官方文档类似的网站,方便大家参阅。
欢迎你参与翻译本项目,在翻译的过程中,可以锻炼你的英语能力和 Visual Studio Code 的实际应用能力,同时还为他人提供方便,何乐而不为?
一个个 commit 堆积起来就是一个了不起的 repo,欢迎你 Fork 并提交 Pull Request 或者 Issue ,哪怕是改正一个错别字、修正一个病句,我们都会很高兴。
参与方法和步骤如下:
Fork git@github.com:CN-VScode-Docs/CN-VScode-Docs.git 或者点仓库地址CN-VScode-Docs
创建您的特性分支 (git checkout -b new-feature)
提交您的改动 (git commit -m 'Added some features or fixed a bug or change a text')
将您的改动记录提交到远程 git 仓库 (git push origin new-feature)
然后到 github 网站的该 git 远程仓库的 new-feature 分支下发起 Pull Request
如果你有任何疑问或者建议、技巧,欢迎提出Issues,大家一起交流。
EDITOR
CUSTOMIZATION
LANGUAGES
RUNTIMES
EXTENSIONS
EXTENSIBILITY REFERENCE
TOOLS
(翻译完成的,请使用删除线将对应划去,像下面这样)
* ~~[Overview](https://code.visualstudio.com/docs)~~
(Fork 之后自行添加到最后)
FAQs
Microsoft Visual Studio Code 中文手册 ===============
The npm package vscode-docs receives a total of 6 weekly downloads. As such, vscode-docs popularity was classified as not popular.
We found that vscode-docs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

Security News
ENISA’s new package manager advisory outlines the dependency security practices companies will need to demonstrate as the EU’s Cyber Resilience Act begins enforcing software supply chain requirements.

Research
/Security News
We identified over 20 additional malicious extensions, along with over 20 related sleeper extensions, some of which have already been weaponized.