KasmVNC module

[bpmct]

A discussion dedicated to the KasmVNC module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
13 / 25	20 / 20	2 / 20	6 / 10	55 / 100

Drilldown

Presentation & Onboarding — 13 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	Single clear example with sensible defaults (desktop_environment, subdomain). Module has limited configuration surface.
Coder-context framing	8	1	Names Coder and KasmVNC, but does not explain what the module adds on top of Coder or show where Coder fits in the flow. The README is minimal.
Visual preview	5	0	No image, GIF, or video. Only an icon reference.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	No sensitive inputs in this module. No secrets are required or exposed.
Non-hardcoded auth path	4	4	No authentication credentials required. The server runs without auth (protected by Coder session token/tunnel).

Restricted-Environment Readiness — 2 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	10	0	No variable to override the GitHub download URL. The base_url is hardcoded to https://github.com/kasmtech/KasmVNC/releases/download/v${KASM_VERSION} in run.sh. Version is configurable but not the source URL itself.
Bring-your-own binary	5	0	No documented way to skip installation when KasmVNC is pre-installed. The script checks if installed and skips the download, but this is not documented in the README.
Egress transparency	3	0	No dedicated README section enumerating external endpoints. The GitHub download URL is only visible in source code.
Runs without sudo	2	2	Script explicitly handles no-sudo case with fallback to user config directory. Lines 197-207 check for sudo availability and use user config path if unavailable, with warnings but continued operation.

Engineering Quality — 6 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All inputs have clear descriptions and sensible defaults. Validation present for desktop_environment and share variables.
Test coverage	4	0	TypeScript tests only verify that terraform apply succeeds for different desktop environments. No .tftest.hcl files. Tests do not cover business logic or end-to-end behavior meaningfully.

Overall — 55 / 100

Raw 41 / 75 → round(41 / 75 × 100) = 55

---

Scored against SCORECARD.md on 2026-07-20 with claude-sonnet-4-5.