Guide · checked 2026-05-13

Developer workstation setup: official download and permission checklist

A practical setup checklist for VS Code, Git, GitHub Desktop, Docker Desktop, Node.js, Python, and AI coding tools.

Basic check order

Start with official project or vendor download pages and avoid bundled developer packs.
Record which installers modify PATH, shell profiles, virtualization features, drivers, or background services.
Use trusted package managers only after verifying publisher identity and package names.
Review editor extensions, AI agents, terminal integrations, and Git credential helpers before opening company repositories.
Separate personal and work accounts, SSH keys, tokens, cloud CLIs, package registry credentials, and browser profiles.
Create a repeatable update and rollback plan for runtimes, Docker images, dependencies, and editors.

Cautions and operating tips

Docker Desktop, WSL, Hyper-V, package managers, and shell plugins can change the machine more deeply than ordinary apps.
A fake developer-tool installer can steal source code, tokens, SSH keys, or browser sessions.
Do not paste secrets, customer logs, or proprietary code into unapproved AI coding tools or extensions.

Common scenarios

New developer laptopInstall one editor, Git, language runtimes, and container tools from official sources; document versions and update channels before adding extensions.

Open-source side projectPersonal experiments can use a broader toolset, but keep them separated from company credentials and repositories.

Team rolloutPrefer managed accounts, approved extensions, standard setup scripts, and a clear policy for AI tools, package registries, and containers.

FAQ

Should I install tools from random tutorial links?

Use tutorials for learning, but download installers from the vendor or project page directly.

Are editor extensions safe if they are popular?

Popularity helps but is not enough. Check publisher, permissions, repository, update history, and whether the extension can read workspace files.

What should be documented for work devices?

Official download URL, version/update channel, admin permissions, account ownership, approved extensions, credential storage, and review date.

Related official download guides

Verified

Visual Studio Code

Visual Studio Code is Microsoft's popular code editor for web, cloud, data, scripting, and extension-based development. This guide helps developers find the official VS Code download, avoid cloned editor installers, and review extension, telemetry, corporate policy, and workspace trust settings.

Official domain: code.visualstudio.com

Verified

Git

Git is a installable desktop app from Git SCM used for coding, source control, package management, databases, automation, and developer workflows. AppVeriq Guide points readers to the official vendor or project-controlled path, then separates download safety, licensing, business-use limits, and account or data-handling cautions before installation.

Official domain: git-scm.com

Verified

Python

Python is a installable desktop app from Python Software Foundation used for coding, source control, package management, databases, automation, and developer workflows. AppVeriq Guide points readers to the official vendor or project-controlled path, then separates download safety, licensing, business-use limits, and account or data-handling cautions before installation.

Official domain: python.org

Verified

Node.js

Node.js is a installable desktop app from OpenJS Foundation used for coding, source control, package management, databases, automation, and developer workflows. AppVeriq Guide points readers to the official vendor or project-controlled path, then separates download safety, licensing, business-use limits, and account or data-handling cautions before installation.

Official domain: nodejs.org

Verified

GitHub Desktop

Official-source guide for GitHub Desktop, covering official installer routes, repository/account separation, credential handling, GitHub Enterprise compatibility, and safe update practices.

Official domain: github.com

Verified

Docker Desktop

Official-source guide for Docker Desktop, focused on licensing, Windows/macOS requirements, virtualization, update channels, extensions, and company-use plan checks.

Official domain: docker.com

Verified

Cursor

Cursor is an AI-assisted code editor. Before installing it for work, verify the official cursor.com download path, account ownership, prompt/code retention settings, extension permissions, and whether company repositories may be indexed or sent to cloud AI services.

Official domain: cursor.com

Verified

Claude desktop app

Claude desktop is an AI assistant app that can connect to files, local tools, and MCP-style workflows. Verify the official download path and review what local context, connectors, and tool permissions are allowed before using it for work.

Official domain: claude.com

Verified

Windsurf

Windsurf is an AI coding environment. The official download check should be paired with a data-policy review covering code context, prompt retention, agent actions, extension access, and whether company repositories are allowed.

Official domain: windsurf.com

Note: this guide is independent pre-installation material. Complete downloads on each product’s official domain.

Next step

Next checks

If terms are confusing, start herePlain-language definitions for official domain, checksum, code signing, business use, and freemium.Browse by pricing modelSeparate free, open-source, freemium, trial, and paid tools by workplace-use conditions.Compare similar toolsCompare tools by purpose, features, pricing, and workplace-use conditions.