ivelten/haskell-devcontainer repository overview

⁠haskell-devcontainer

A ready-to-use Docker image for Haskell development, built on top of the VS Code Dev Containers⁠ base image. Pull it, attach VS Code, and get a fully configured Haskell environment in seconds — no local toolchain required.

⁠Quick Start

// .devcontainer/devcontainer.json
{
  "image": "ivelten/haskell-devcontainer:latest",
  "remoteUser": "vscode",
  "postCreateCommand": "npm install -g @anthropic-ai/claude-code",
  "runArgs": [
    "--cap-drop=ALL",
    "--security-opt=no-new-privileges:true",
    "--pids-limit=2048"
  ]
}

⁠What's Inside

⁠Haskell Toolchain

⁠Developer Tools

• HLS⁠ — Haskell Language Server (completions, type hints, go-to-definition)
• Hoogle⁠ — Local Haskell API search, pre-generated at build time
• Ormolu⁠ — Opinionated, deterministic code formatter
• fast-tags⁠ — Fast tag file generator for Haskell source
• cabal-gild⁠ — Formatter and linter for .cabal files
• direnv⁠ — Per-directory environment variables, hooked into bash and zsh
• Node.js & npm — Available for installing npm-based tools via postCreateCommand

⁠Debugging (DAP)

Full Debug Adapter Protocol⁠ support via haskell-dap, ghci-dap, and haskell-debug-adapter.

⁠Platform Support

Images are built for linux/amd64 (Intel/AMD) and linux/arm64 (Apple Silicon).

⁠Security

The runArgs in the Quick Start snippet enforce least-privilege:

direnv is compiled from source inside a golang builder stage rather than downloaded as a prebuilt binary, ensuring the embedded stdlib is always the patched version.

⁠CI/CD

Built and published automatically on every version tag (v*.*.*) and manual dispatch via GitHub Actions. Versioned tags follow semver: v1.2.3 publishes :1.2.3, :1.2, :1, and :latest.

The pipeline runs two Trivy gates before publishing: a Dockerfile misconfiguration scan and an image vulnerability scan, blocking the push on any fixable CRITICAL/HIGH CVEs.

⁠Source

github.com/ivelten/haskell-devcontainer⁠