agentsdk

Nov 12, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 11, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 10, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 4, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 12, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 11, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 10, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 30, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 28, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 16, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 2, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ type AWSSessionTokenExchanger struct

+ type AzureSessionTokenExchanger struct

+ type FixedSessionTokenProvider struct

+ func (FixedSessionTokenProvider) RefreshToken(_ context.Context) error

+ type GoogleSessionTokenExchanger struct

+ type InstanceIdentitySessionTokenProvider struct

+ TokenExchanger TokenExchanger

+ func (i *InstanceIdentitySessionTokenProvider) AsRequestOption() codersdk.RequestOption

+ func (i *InstanceIdentitySessionTokenProvider) GetSessionToken() string

+ func (i *InstanceIdentitySessionTokenProvider) RefreshToken(ctx context.Context) error

+ func (i *InstanceIdentitySessionTokenProvider) SetDialOption(opts *websocket.DialOptions)

+ type RefreshableSessionTokenProvider interface

+ RefreshToken func(ctx context.Context) error

+ type SessionTokenSetup func(client *codersdk.Client) RefreshableSessionTokenProvider

+ func WithAWSInstanceIdentity() SessionTokenSetup

+ func WithAzureInstanceIdentity() SessionTokenSetup

+ func WithFixedToken(token string) SessionTokenSetup

+ func WithGoogleInstanceIdentity(serviceAccount string, gcpClient *metadata.Client) SessionTokenSetup

+ type TokenExchanger interface

Nov 10, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 28, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 16, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 1, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Sep 3, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 1, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Sep 3, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 7, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 5, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Sep 4, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 7, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 15, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 2, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 1, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

type Client

+ func (c *Client) ConnectRPC26(ctx context.Context) (proto.DRPCAgentClient26, tailnetproto.DRPCTailnetClient26, error)

type Manifest

+ ParentID uuid.UUID

Aug 7, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 15, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 8, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 30, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 10, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 3, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

type Client

+ func (c *Client) ConnectRPC25(ctx context.Context) (proto.DRPCAgentClient25, tailnetproto.DRPCTailnetClient25, error)

May 20, 2025 GO-2025-3921 +2 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

May 15, 2025 GO-2025-3921 +2 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ var ErrTransmissionSourceClosed = xerrors.New("transmission source closed")

+ var ErrTransmissionTargetClosed = xerrors.New("transmission target closed")

+ func PrebuildClaimedChannel(id uuid.UUID) string

+ func WaitForReinitLoop(ctx context.Context, logger slog.Logger, client *Client) <-chan ReinitializationEvent

type Client

+ func (c *Client) WaitForReinit(ctx context.Context) (*ReinitializationEvent, error)

+ type ReinitializationEvent struct

+ Reason ReinitializationReason

+ WorkspaceID uuid.UUID

+ type ReinitializationReason string

+ const ReinitializeReasonPrebuildClaimed

+ type SSEAgentReinitReceiver struct

+ func NewSSEAgentReinitReceiver(r io.ReadCloser) *SSEAgentReinitReceiver

+ func (s *SSEAgentReinitReceiver) Receive(ctx context.Context) (*ReinitializationEvent, error)

+ type SSEAgentReinitTransmitter struct

+ func NewSSEAgentReinitTransmitter(logger slog.Logger, rw http.ResponseWriter, r *http.Request) *SSEAgentReinitTransmitter

+ func (s *SSEAgentReinitTransmitter) Transmit(ctx context.Context, reinitEvents <-chan ReinitializationEvent) error

Apr 29, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 24, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 23, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 2, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ var ErrLogLimitExceeded = xerrors.New("Log limit exceeded")

+ func DevcontainerFromProto(pdc *proto.WorkspaceAgentDevcontainer) (codersdk.WorkspaceAgentDevcontainer, error)

+ func DevcontainersFromProto(pdcs []*proto.WorkspaceAgentDevcontainer) ([]codersdk.WorkspaceAgentDevcontainer, error)

+ func ProtoFromDevcontainer(dc codersdk.WorkspaceAgentDevcontainer) *proto.WorkspaceAgentDevcontainer

+ func ProtoFromDevcontainers(dcs []codersdk.WorkspaceAgentDevcontainer) []*proto.WorkspaceAgentDevcontainer

type Client

+ func (c *Client) PatchAppStatus(ctx context.Context, req PatchAppStatus) error

type Manifest

+ Devcontainers []codersdk.WorkspaceAgentDevcontainer

+ type PatchAppStatus struct

+ AppSlug string

+ Icon string

+ Message string

+ NeedsUserAttention bool

+ State codersdk.WorkspaceAppStatusState

+ URI string

Apr 29, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Mar 17, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Mar 15, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Mar 4, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ func ProtoFromConnectionType(typ ConnectionType) (proto.Connection_Type, error)

type Client

+ func (c *Client) ConnectRPC24(ctx context.Context) (proto.DRPCAgentClient24, tailnetproto.DRPCTailnetClient24, error)

+ type ConnectionType string

+ const ConnectionTypeJetBrains

+ const ConnectionTypeReconnectingPTY

+ const ConnectionTypeSSH

+ const ConnectionTypeUnspecified

+ const ConnectionTypeVSCode

+ func ConnectionTypeFromProto(typ proto.Connection_Type) (ConnectionType, error)

Apr 29, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 23, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Mar 6, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Feb 4, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jan 29, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jan 23, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jan 18, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jan 7, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Dec 16, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Dec 3, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

type Client

+ func (c *Client) ConnectRPC20WithTailnet(ctx context.Context) (proto.DRPCAgentClient20, tailnetproto.DRPCTailnetClient20, error)

+ func (c *Client) ConnectRPC21WithTailnet(ctx context.Context) (proto.DRPCAgentClient21, tailnetproto.DRPCTailnetClient21, error)

+ func (c *Client) ConnectRPC22(ctx context.Context) (proto.DRPCAgentClient22, tailnetproto.DRPCTailnetClient22, error)

+ func (c *Client) ConnectRPC23(ctx context.Context) (proto.DRPCAgentClient23, tailnetproto.DRPCTailnetClient23, error)

Dec 12, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 8, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 8, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 4, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 24, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 1, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 28, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 8, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 8, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 1, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Sep 3, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 24, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Sep 5, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 20, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 7, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 6, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

type Client

+ func (c *Client) ConnectRPC20(ctx context.Context) (proto.DRPCAgentClient20, error)

+ func (c *Client) ConnectRPC21(ctx context.Context) (proto.DRPCAgentClient21, error)

+ type LogDest interface

+ BatchCreateLogs func(ctx context.Context, request *proto.BatchCreateLogsRequest) (*proto.BatchCreateLogsResponse, error)

Aug 20, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 6, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 1, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 23, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 18, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 2, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ func ProtoFromLifecycleState(s codersdk.WorkspaceAgentLifecycle) (proto.Lifecycle_State, error)

+ type PostLogSourceRequest struct

+ DisplayName string

+ ID uuid.UUID

+ Icon string

Aug 1, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 22, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 18, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 24, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 21, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 6, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 4, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ func BannerConfigFromProto(sbp *proto.BannerConfig) codersdk.BannerConfig

+ func ProtoFromBannerConfig(sb codersdk.BannerConfig) *proto.BannerConfig

Jun 24, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 21, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

May 22, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

May 16, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

May 6, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

May 22, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 22, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 17, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 3, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 22, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 17, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 5, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Mar 19, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Mar 12, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ var LogLimitExceededError = xerrors.New("Log limit exceeded")

+ func LifecycleStateFromProto(s proto.Lifecycle_State) (codersdk.WorkspaceAgentLifecycle, error)

+ func MetadataResultFromProto(r *proto.WorkspaceAgentMetadata_Result) codersdk.WorkspaceAgentMetadataResult

+ func ProtoFromLifecycle(req PostLifecycleRequest) (*proto.Lifecycle, error)

+ func ProtoFromLog(log Log) (*proto.Log, error)

+ func ProtoFromMetadataResult(r codersdk.WorkspaceAgentMetadataResult) *proto.WorkspaceAgentMetadata_Result

+ type BatchUpdateAppHealthsClient interface

+ BatchUpdateAppHealths func(ctx context.Context, req *proto.BatchUpdateAppHealthRequest) (*proto.BatchUpdateAppHealthResponse, error)

+ type LogSender struct

+ func NewLogSender(logger slog.Logger) *LogSender

+ func (l *LogSender) Enqueue(src uuid.UUID, logs ...Log)

+ func (l *LogSender) Flush(src uuid.UUID)

+ func (l *LogSender) GetScriptLogger(logSourceID uuid.UUID) ScriptLogger

+ func (l *LogSender) SendLoop(ctx context.Context, dest logDest) error

+ func (l *LogSender) WaitUntilEmpty(ctx context.Context) error

type Metadata

+ func MetadataFromProto(m *proto.Metadata) Metadata

+ type ScriptLogger struct

+ func (s ScriptLogger) Flush(ctx context.Context) error

+ func (s ScriptLogger) Send(ctx context.Context, log ...Log) error

Mar 9, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Mar 4, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Feb 15, 2024 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Feb 12, 2024 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Feb 7, 2024 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Feb 7, 2024 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ func AgentScriptFromProto(protoScript *proto.WorkspaceAgentScript) (codersdk.WorkspaceAgentScript, error)

+ func AgentScriptsFromProto(protoScripts []*proto.WorkspaceAgentScript) ([]codersdk.WorkspaceAgentScript, error)

+ func AppFromProto(protoApp *proto.WorkspaceApp) (codersdk.WorkspaceApp, error)

+ func AppHealthPoster(aAPI proto.DRPCAgentClient) func(ctx context.Context, req PostAppHealthsRequest) error

+ func AppsFromProto(protoApps []*proto.WorkspaceApp) ([]codersdk.WorkspaceApp, error)

+ func MetadataDescriptionFromProto(description *proto.WorkspaceAgentMetadata_Description) codersdk.WorkspaceAgentMetadataDescription

+ func MetadataDescriptionsFromProto(descriptions []*proto.WorkspaceAgentMetadata_Description) []codersdk.WorkspaceAgentMetadataDescription

+ func ProtoFromApp(a codersdk.WorkspaceApp) (*proto.WorkspaceApp, error)

+ func ProtoFromAppHealthsRequest(req PostAppHealthsRequest) (*proto.BatchUpdateAppHealthRequest, error)

+ func ProtoFromApps(apps []codersdk.WorkspaceApp) ([]*proto.WorkspaceApp, error)

+ func ProtoFromManifest(manifest Manifest) (*proto.Manifest, error)

+ func ProtoFromMetadataDescription(d codersdk.WorkspaceAgentMetadataDescription) *proto.WorkspaceAgentMetadata_Description

+ func ProtoFromMetadataDescriptions(descriptions []codersdk.WorkspaceAgentMetadataDescription) []*proto.WorkspaceAgentMetadata_Description

+ func ProtoFromScript(s codersdk.WorkspaceAgentScript) *proto.WorkspaceAgentScript

+ func ProtoFromScripts(scripts []codersdk.WorkspaceAgentScript) []*proto.WorkspaceAgentScript

+ func ProtoFromServiceBanner(sb codersdk.ServiceBannerConfig) *proto.ServiceBanner

+ func ProtoFromSubsystems(ss []codersdk.AgentSubsystem) ([]proto.Startup_Subsystem, error)

+ func ServiceBannerFromProto(sbp *proto.ServiceBanner) codersdk.ServiceBannerConfig

type Client

+ func (c *Client) ConnectRPC(ctx context.Context) (drpc.Conn, error)

+ func (c *Client) RewriteDERPMap(derpMap *tailcfg.DERPMap)

type Manifest

+ func ManifestFromProto(manifest *proto.Manifest) (Manifest, error)

Mar 4, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jan 24, 2024 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jan 22, 2024 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jan 19, 2024 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

type Manifest

+ AgentName string

+ WorkspaceName string

Mar 4, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Dec 21, 2023 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

type Client

+ func (c *Client) RPC(ctx context.Context) (agentproto.DRPCAgentClient, error)

Dec 14, 2023 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Dec 12, 2023 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

type Manifest

+ OwnerName string

+ WorkspaceID uuid.UUID

type Stats

+ func (s Stats) SessionCount() int64

Nov 17, 2023 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 30, 2023 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 20, 2023 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 17, 2023 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ type Metadata struct

+ Key string

type PostMetadataRequest

+ Metadata []Metadata

+ type PostMetadataRequestDeprecated = codersdk.WorkspaceAgentMetadataResult

Oct 11, 2023 GO-2024-2602 +2 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ func LogsSenderFlushTimeout(timeout time.Duration) func(*logsSenderOptions)

type Client

+ func (c *Client) ExternalAuth(ctx context.Context, req ExternalAuthRequest) (ExternalAuthResponse, error)

+ type ExternalAuthRequest struct

+ ID string

+ Listen bool

+ Match string

+ type ExternalAuthResponse struct

+ AccessToken string

+ Password string

+ TokenExtra map[string]interface{}

+ Type string

+ URL string

+ Username string

Oct 4, 2023 GO-2024-2602 +2 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Sep 27, 2023 GO-2024-2602 +2 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ var ExternalLogSourceID = uuid.MustParse("3b579bf4-1ed8-4b99-87a8-e9a1e3410410")

+ func LogsWriter(ctx context.Context, sender func(ctx context.Context, log ...Log) error, ...) io.WriteCloser

type Client

+ func (c *Client) PostLogSource(ctx context.Context, req PostLogSource) (codersdk.WorkspaceAgentLogSource, error)

+ type LogSource struct

+ DisplayName string

+ ID uuid.UUID

+ Icon string

type Manifest

+ Scripts []codersdk.WorkspaceAgentScript

type PatchLogs

+ LogSourceID uuid.UUID

+ type PostLogSource struct

+ DisplayName string

+ ID uuid.UUID

+ Icon string

+ type Script struct

+ Script string

Sep 5, 2023 GO-2024-2602 +2 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 28, 2023 GO-2024-2602 +2 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 24, 2023 GO-2024-2602 +2 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

type Manifest

+ DERPForceWebSockets bool

Aug 23, 2023 GO-2024-2602 +2 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 22, 2023 GO-2024-2602 +2 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ func LogsNotifyChannel(agentID uuid.UUID) string

+ func LogsSender(patchLogs func(ctx context.Context, req PatchLogs) error, logger slog.Logger) (sendLog func(ctx context.Context, log ...Log) error, ...)

+ func StartupLogsWriter(ctx context.Context, sender func(ctx context.Context, log ...Log) error, ...) io.WriteCloser

+ type AWSInstanceIdentityToken struct

+ Document string

+ Signature string

+ type AgentMetric struct

+ Labels []AgentMetricLabel

+ Name string

+ Type AgentMetricType

+ Value float64

+ type AgentMetricLabel struct

+ Name string

+ Value string

+ type AgentMetricType string

+ const AgentMetricTypeCounter

+ const AgentMetricTypeGauge

+ type AuthenticateResponse struct

+ SessionToken string

+ type AzureInstanceIdentityToken struct

+ Encoding string

+ Signature string

+ type Client struct

+ SDK *codersdk.Client

+ func New(serverURL *url.URL) *Client

+ func (c *Client) AuthAWSInstanceIdentity(ctx context.Context) (AuthenticateResponse, error)

+ func (c *Client) AuthAzureInstanceIdentity(ctx context.Context) (AuthenticateResponse, error)

+ func (c *Client) AuthGoogleInstanceIdentity(ctx context.Context, serviceAccount string, gcpClient *metadata.Client) (AuthenticateResponse, error)

+ func (c *Client) DERPMapUpdates(ctx context.Context) (<-chan DERPMapUpdate, io.Closer, error)

+ func (c *Client) GetServiceBanner(ctx context.Context) (codersdk.ServiceBannerConfig, error)

+ func (c *Client) GitAuth(ctx context.Context, gitURL string, listen bool) (GitAuthResponse, error)

+ func (c *Client) GitSSHKey(ctx context.Context) (GitSSHKey, error)

+ func (c *Client) Listen(ctx context.Context) (net.Conn, error)

+ func (c *Client) Manifest(ctx context.Context) (Manifest, error)

+ func (c *Client) PatchLogs(ctx context.Context, req PatchLogs) error

+ func (c *Client) PostAppHealth(ctx context.Context, req PostAppHealthsRequest) error

+ func (c *Client) PostLifecycle(ctx context.Context, req PostLifecycleRequest) error

+ func (c *Client) PostMetadata(ctx context.Context, key string, req PostMetadataRequest) error

+ func (c *Client) PostStartup(ctx context.Context, req PostStartupRequest) error

+ func (c *Client) PostStats(ctx context.Context, stats *Stats) (StatsResponse, error)

+ func (c *Client) ReportStats(ctx context.Context, log slog.Logger, statsChan <-chan *Stats, ...) (io.Closer, error)

+ func (c *Client) SetSessionToken(token string)

+ type DERPMapUpdate struct

+ DERPMap *tailcfg.DERPMap

+ Err error

+ type GitAuthResponse struct

+ Password string

+ URL string

+ Username string

+ type GitSSHKey struct

+ PrivateKey string

+ PublicKey string

+ type GoogleInstanceIdentityToken struct

+ JSONWebToken string

+ type Log struct

+ CreatedAt time.Time

+ Level codersdk.LogLevel

+ Output string

+ Source codersdk.WorkspaceAgentLogSource

+ type LogsNotifyMessage struct

+ CreatedAfter int64

+ type Manifest struct

+ AgentID uuid.UUID

+ Apps []codersdk.WorkspaceApp

+ DERPMap *tailcfg.DERPMap

+ Directory string

+ DisableDirectConnections bool

+ EnvironmentVariables map[string]string

+ GitAuthConfigs int

+ MOTDFile string

+ Metadata []codersdk.WorkspaceAgentMetadataDescription

+ ShutdownScript string

+ ShutdownScriptTimeout time.Duration

+ StartupScript string

+ StartupScriptTimeout time.Duration

+ VSCodePortProxyURI string

+ type PatchLogs struct

+ Logs []Log

+ type PostAppHealthsRequest struct

+ Healths map[uuid.UUID]codersdk.WorkspaceAppHealth

+ type PostLifecycleRequest struct

+ ChangedAt time.Time

+ State codersdk.WorkspaceAgentLifecycle

+ type PostMetadataRequest = codersdk.WorkspaceAgentMetadataResult

+ type PostStartupRequest struct

+ ExpandedDirectory string

+ Subsystems []codersdk.AgentSubsystem

+ Version string

+ type Stats struct

+ ConnectionCount int64

+ ConnectionMedianLatencyMS float64

+ ConnectionsByProto map[string]int64

+ Metrics []AgentMetric

+ RxBytes int64

+ RxPackets int64

+ SessionCountJetBrains int64

+ SessionCountReconnectingPTY int64

+ SessionCountSSH int64

+ SessionCountVSCode int64

+ TxBytes int64

+ TxPackets int64

+ type StatsResponse struct

+ ReportInterval time.Duration