Use Open VSX's official deprecated and malicious extensions list (#19822)

* Use Open VSX's official deprecated and malicious extensions list

* Properly copy file over from previous stage

Co-authored-by: mustard <[email protected]>

* Pin version by sha

---------

Co-authored-by: mustard <[email protected]>

Author: filiptronicek

components/ide-proxy/Dockerfile

@@ -4,7 +4,7 @@
 
 FROM cgr.dev/chainguard/wolfi-base:latest@sha256:3eff851ab805966c768d2a8107545a96218426cee1e5cc805865505edbe6ce92 as compress
 
-RUN apk add brotli gzip
+RUN apk add brotli gzip curl
 
 # Gitpod CLI and Local App
 COPY components-local-app--app-with-manifest/bin/* /bin/
@@ -13,8 +13,12 @@ RUN for FILE in `ls /bin/gitpod-local-companion*`;do \
   gzip -v -f -9 -k "$FILE"; \
 done
 
+RUN mkdir -p static/code
+RUN curl -o static/code/marketplace.json "https://raw.githubusercontent.com/open-vsx/publish-extensions/7d3778cb07ff7e22e5e99be618fd1bd2a94394ac/extension-control/extensions.json"
+
 FROM caddy/caddy:2.7.6-alpine
 
 COPY conf/Caddyfile /etc/caddy/Caddyfile
 COPY static /www/
+COPY --from=compress /static /www
 COPY --from=compress /bin /www/static/bin