Dotfiles module

[bpmct]

A discussion dedicated to the Dotfiles module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
17 / 25	20 / 20	N/A	8 / 10	82 / 100

Drilldown

Presentation & Onboarding — 17 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides clear examples for major modes: apply as current user, apply as another user (with sudo), apply to both current user and root, setting default dotfiles repository, and custom branch configuration. Each has sensible defaults.
Coder-context framing	8	5	README mentions "coder dotfiles command" and links to Coder docs, but does not clearly explain what the module adds on top of Coder or show where Coder fits in the developer flow. The opening line mentions developers bringing dotfiles but lacks context about Coder's role.
Visual preview	5	0	No image, GIF, or video present in README. Only an icon reference in frontmatter.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	No sensitive inputs exist in this module. The dotfiles_uri is a user-provided repository URL, not a secret. No API keys or credentials are handled.
Non-hardcoded auth path	4	4	Module uses workspace SSH keys for Git authentication (documented in "SSH vs HTTPS URLs" section). No raw keys or tokens required.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing of its own; it only invokes the coder CLI (already in image) to clone user-specified dotfiles repositories.
Bring-your-own binary	5	N/A	Module downloads nothing of its own; it only invokes the coder CLI (already in image) to clone user-specified dotfiles repositories.
Egress transparency	3	N/A	Module downloads nothing of its own; it only invokes the coder CLI (already in image) to clone user-specified dotfiles repositories.
Runs without sudo	2	N/A	Module downloads nothing of its own; it only invokes the coder CLI (already in image) to clone user-specified dotfiles repositories.

Note: All Restricted-Environment criteria are N/A because this module downloads nothing of its own. It only invokes the pre-installed coder CLI to clone user-specified repositories. The user-provided dotfiles_uri is an input, not a module-controlled download source.

Engineering Quality — 8 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All inputs have clear descriptions. Sensible defaults present (order, group, description, default_dotfiles_uri, etc.). Validation blocks present for dotfiles_uri, default_dotfiles_uri, dotfiles_branch, and user variables with appropriate regex patterns and error messages.
Test coverage	4	2	TypeScript tests in main.test.ts cover URL validation, output values, parameter ordering, branch configuration, and command format. However, no .tftest.hcl file present for Terraform-native business logic testing. Tests are end-to-end only.

Overall — 82 / 100

Raw 45 / 55 → round(45 / 55 × 100) = 82

Note: Utility track module. Restricted-Environment Readiness theme excluded (N/A) because module downloads nothing of its own. Final score normalized from 45/75 to 60/100.

---

Scored against SCORECARD.md on 2026-07-15 with claude-sonnet-4-5.