OSS
/oss/en/openforge/standards/developer-environment-security

Developer Environment Security

Local workstation boundaries, credential isolation, and secure tool execution.

Developer Environment Security

Developer workstations are critical trust boundaries where source code and credentials interact.

Workstation Guidelines

  • Credential Isolation: Production credentials strictly isolated from development environments.
  • No Unsafe Execution: Disallow piping unverified remote scripts into local shells (curl | bash).
  • Tool Auditing: Regularly audit IDE plugins and local developer toolchains.

Canonical Source