GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder
wsbuilder
packageThis package is not in the latest version of its module.
Details
Validgo.mod file
The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
- Redistributable license
Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
- Tagged version
Modules with tagged versions give importers more predictable builds.
- Stable version
When a project reaches major version v1 it is considered stable.
- Learn more about best practices
Repository
Links
Open Source Insights
Documentation¶
Overview¶
Package wsbuilder provides the Builder object, which encapsulates the common business logic of inserting a newworkspace build into the database.
Index¶
- func ProvisionerVersionSupportsDynamicParameters(version string) bool
- type BuildError
- type Builder
- func (b Builder) ActiveVersion() Builder
- func (b *Builder) Build(ctx context.Context, store database.Store, ...) (*database.WorkspaceBuild, *database.ProvisionerJob, ...)
- func (b Builder) DeploymentValues(dv *codersdk.DeploymentValues) Builder
- func (b Builder) DynamicParameters(using bool) Builder
- func (b Builder) Experiments(exp codersdk.Experiments) Builder
- func (b Builder) Initiator(u uuid.UUID) Builder
- func (b Builder) LogLevel(l string) Builder
- func (b Builder) MarkPrebuild() Builder
- func (b Builder) MarkPrebuiltWorkspaceClaim() Builder
- func (b Builder) Orphan() Builder
- func (b Builder) Reason(r database.BuildReason) Builder
- func (b Builder) RichParameterValues(p []codersdk.WorkspaceBuildParameter) Builder
- func (b Builder) SetLastWorkspaceBuildInTx(build *database.WorkspaceBuild) Builder
- func (b Builder) SetLastWorkspaceBuildJobInTx(job *database.ProvisionerJob) Builder
- func (b Builder) State(state []byte) Builder
- func (b Builder) TemplateVersionPresetID(id uuid.UUID) Builder
- func (b Builder) VersionID(v uuid.UUID) Builder
- type Option
Constants¶
This section is empty.
Variables¶
This section is empty.
Functions¶
funcProvisionerVersionSupportsDynamicParameters¶added inv2.23.0
Types¶
typeBuildError¶
func (BuildError)Error¶
func (eBuildError) Error()string
func (BuildError)Unwrap¶
func (eBuildError) Unwrap()error
typeBuilder¶
type Builder struct {// contains filtered or unexported fields}Builder encapsulates the business logic of inserting a new workspace build into the database.
Builder follows the so-called "Builder" pattern where options that customize the kind of build you get returna new instance of the Builder with the option applied.
Example:
b = wsbuilder.New(workspace, transition).VersionID(vID).Initiator(me)build, job, err := b.Build(...)
func (Builder)ActiveVersion¶
func (*Builder)Build¶
func (b *Builder) Build(ctxcontext.Context,storedatabase.Store,authFunc func(actionpolicy.Action, objectrbac.Objecter)bool,auditBaggageaudit.WorkspaceBuildBaggage,) (*database.WorkspaceBuild, *database.ProvisionerJob, []database.GetEligibleProvisionerDaemonsByProvisionerJobIDsRow,error,)
Build computes and inserts a new workspace build into the database. If authFunc is provided, it also performsauthorization preflight checks.
func (Builder)DeploymentValues¶
func (bBuilder) DeploymentValues(dv *codersdk.DeploymentValues)Builder
func (Builder)DynamicParameters¶added inv2.23.0
func (Builder)Experiments¶added inv2.23.0
func (bBuilder) Experiments(expcodersdk.Experiments)Builder
func (Builder)MarkPrebuild¶added inv2.22.0
MarkPrebuild indicates that a prebuilt workspace is being built.
func (Builder)MarkPrebuiltWorkspaceClaim¶added inv2.22.0
MarkPrebuiltWorkspaceClaim indicates that a prebuilt workspace is being claimed.
func (Builder)RichParameterValues¶
func (bBuilder) RichParameterValues(p []codersdk.WorkspaceBuildParameter)Builder
func (Builder)SetLastWorkspaceBuildInTx¶
func (bBuilder) SetLastWorkspaceBuildInTx(build *database.WorkspaceBuild)Builder
SetLastWorkspaceBuildInTx prepopulates the Builder's cache with the last workspace build. This allows usto avoid a repeated database query when the Builder's caller also needs the workspace build, e.g. auto-start &auto-stop.
CAUTION: only call this method from within a database transaction with RepeatableRead isolation. This transactionMUST be the database.Store you call Build() with.
func (Builder)SetLastWorkspaceBuildJobInTx¶
func (bBuilder) SetLastWorkspaceBuildJobInTx(job *database.ProvisionerJob)Builder
SetLastWorkspaceBuildJobInTx prepopulates the Builder's cache with the last workspace build job. This allows usto avoid a repeated database query when the Builder's caller also needs the workspace build job, e.g. auto-start &auto-stop.
CAUTION: only call this method from within a database transaction with RepeatableRead isolation. This transactionMUST be the database.Store you call Build() with.
Source Files