agentapi

Dec 2, 2025

Changes in this version

+ type CachedWorkspaceFields struct

+ func (cws *CachedWorkspaceFields) AsWorkspaceIdentity() (database.WorkspaceIdentity, bool)

+ func (cws *CachedWorkspaceFields) Clear()

+ func (cws *CachedWorkspaceFields) UpdateValues(ws database.Workspace)

type MetadataAPI

+ Workspace *CachedWorkspaceFields

type Options

+ AuthenticatedCtx context.Context

type StatsAPI

+ Workspace *CachedWorkspaceFields

Nov 12, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 11, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 10, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 4, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

type ResourcesMonitoringAPI

+ func (a *ResourcesMonitoringAPI) InitMonitors(ctx context.Context) error

Nov 12, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 11, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 10, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 30, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 28, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 16, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 2, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 10, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 28, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 16, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 1, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Sep 3, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 1, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Sep 3, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 7, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 5, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ type ConnLogAPI struct

+ AgentFn func(context.Context) (database.WorkspaceAgent, error)

+ ConnectionLogger *atomic.Pointer[connectionlog.ConnectionLogger]

+ Database database.Store

+ Log slog.Logger

+ func (a *ConnLogAPI) ReportConnection(ctx context.Context, req *agentproto.ReportConnectionRequest) (*emptypb.Empty, error)

type Options

+ ConnectionLogger *atomic.Pointer[connectionlog.ConnectionLogger]

Sep 4, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 7, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 15, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 2, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 1, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

type Options

+ OrganizationID uuid.UUID

+ type SubAgentAPI struct

+ AgentFn func(context.Context) (database.WorkspaceAgent, error)

+ AgentID uuid.UUID

+ Clock quartz.Clock

+ Database database.Store

+ Log slog.Logger

+ OrganizationID uuid.UUID

+ OwnerID uuid.UUID

+ func (a *SubAgentAPI) CreateSubAgent(ctx context.Context, req *agentproto.CreateSubAgentRequest) (*agentproto.CreateSubAgentResponse, error)

+ func (a *SubAgentAPI) DeleteSubAgent(ctx context.Context, req *agentproto.DeleteSubAgentRequest) (*agentproto.DeleteSubAgentResponse, error)

+ func (a *SubAgentAPI) ListSubAgents(ctx context.Context, _ *agentproto.ListSubAgentsRequest) (*agentproto.ListSubAgentsResponse, error)

Aug 7, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 15, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 8, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 30, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 10, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 3, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

May 20, 2025 GO-2025-3921 +2 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

May 15, 2025 GO-2025-3921 +2 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 29, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 24, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 23, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 2, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 29, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Mar 17, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Mar 15, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Mar 4, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ type AuditAPI struct

+ AgentFn func(context.Context) (database.WorkspaceAgent, error)

+ Auditor *atomic.Pointer[audit.Auditor]

+ Database database.Store

+ Log slog.Logger

+ func (a *AuditAPI) ReportConnection(ctx context.Context, req *agentproto.ReportConnectionRequest) (*emptypb.Empty, error)

type Options

+ Auditor *atomic.Pointer[audit.Auditor]

+ Clock quartz.Clock

+ NotificationsEnqueuer notifications.Enqueuer

+ type ResourcesMonitoringAPI struct

+ AgentID uuid.UUID

+ Clock quartz.Clock

+ Config resourcesmonitor.Config

+ Database database.Store

+ Debounce time.Duration

+ Log slog.Logger

+ NotificationsEnqueuer notifications.Enqueuer

+ WorkspaceID uuid.UUID

+ func (a *ResourcesMonitoringAPI) GetResourcesMonitoringConfiguration(ctx context.Context, _ *proto.GetResourcesMonitoringConfigurationRequest) (*proto.GetResourcesMonitoringConfigurationResponse, error)

+ func (a *ResourcesMonitoringAPI) PushResourcesMonitoringUsage(ctx context.Context, req *proto.PushResourcesMonitoringUsageRequest) (*proto.PushResourcesMonitoringUsageResponse, error)

Apr 29, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 23, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Mar 6, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Feb 4, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jan 29, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jan 23, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jan 18, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jan 7, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Dec 16, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Dec 3, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

type LifecycleAPI

+ WorkspaceID uuid.UUID

type ManifestAPI

+ WorkspaceID uuid.UUID

type Options

+ OwnerID uuid.UUID

Dec 12, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 8, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 8, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 4, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 24, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 1, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ type ScriptsAPI struct

+ Database database.Store

+ func (s *ScriptsAPI) ScriptCompleted(ctx context.Context, req *agentproto.WorkspaceAgentScriptCompletedRequest) (*agentproto.WorkspaceAgentScriptCompletedResponse, error)

Oct 28, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 8, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 8, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 1, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Sep 3, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 24, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Sep 5, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 20, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 7, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 6, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

type Options

+ NetworkTelemetryHandler func(batch []*tailnetproto.TelemetryEvent)

Aug 20, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 6, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 1, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 23, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 18, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 2, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

type Options

+ Experiments codersdk.Experiments

type StatsAPI

+ Experiments codersdk.Experiments

Aug 1, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 22, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 18, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 24, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 21, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 6, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 4, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ type AnnouncementBannerAPI struct

+ func (a *AnnouncementBannerAPI) GetAnnouncementBanners(ctx context.Context, _ *proto.GetAnnouncementBannersRequest) (*proto.GetAnnouncementBannersResponse, error)

+ func (a *AnnouncementBannerAPI) GetServiceBanner(ctx context.Context, _ *proto.GetServiceBannerRequest) (*proto.ServiceBanner, error)

type Options

+ StatsReporter *workspacestats.Reporter

type StatsAPI

+ StatsReporter *workspacestats.Reporter

Jun 24, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 21, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

May 22, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

May 16, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

May 6, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

May 22, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 22, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 17, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 3, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 22, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 17, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 5, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Mar 19, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Mar 12, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

type StatsAPI

+ Pubsub pubsub.Pubsub

Mar 9, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Mar 4, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Feb 15, 2024 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Feb 12, 2024 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Feb 7, 2024 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Feb 7, 2024 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ func WithAPIVersion(ctx context.Context, version string) context.Context

type LifecycleAPI

+ TimeNowFn func() time.Time

type LogsAPI

+ TimeNowFn func() time.Time

type ManifestAPI

+ WorkspaceIDFn func(context.Context, *database.WorkspaceAgent) (uuid.UUID, error)

type MetadataAPI

+ TimeNowFn func() time.Time

type Options

+ AppearanceFetcher *atomic.Pointer[appearance.Fetcher]

type StatsAPI

+ TimeNowFn func() time.Time

+ type StatsBatcher interface

+ Add func(now time.Time, agentID uuid.UUID, templateID uuid.UUID, userID uuid.UUID, ...) error

Mar 4, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jan 24, 2024 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jan 22, 2024 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jan 19, 2024 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Mar 4, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Dec 21, 2023 GO-2024-2602 +3 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ const AgentAPIVersionDRPC

+ func ActivityBumpWorkspace(ctx context.Context, log slog.Logger, db database.Store, workspaceID uuid.UUID, ...)

+ func WatchWorkspaceAgentMetadataChannel(id uuid.UUID) string

+ type API struct

+ func New(opts Options) *API

+ func (a *API) Serve(ctx context.Context, l net.Listener) error

+ func (a *API) Server(ctx context.Context) (*drpcserver.Server, error)

+ type AppsAPI struct

+ AgentFn func(context.Context) (database.WorkspaceAgent, error)

+ Database database.Store

+ Log slog.Logger

+ PublishWorkspaceUpdateFn func(context.Context, *database.WorkspaceAgent) error

+ func (a *AppsAPI) BatchUpdateAppHealths(ctx context.Context, req *agentproto.BatchUpdateAppHealthRequest) (*agentproto.BatchUpdateAppHealthResponse, error)

+ type LifecycleAPI struct

+ AgentFn func(context.Context) (database.WorkspaceAgent, error)

+ Database database.Store

+ Log slog.Logger

+ PublishWorkspaceUpdateFn func(context.Context, *database.WorkspaceAgent) error

+ WorkspaceIDFn func(context.Context, *database.WorkspaceAgent) (uuid.UUID, error)

+ func (a *LifecycleAPI) UpdateLifecycle(ctx context.Context, req *agentproto.UpdateLifecycleRequest) (*agentproto.Lifecycle, error)

+ func (a *LifecycleAPI) UpdateStartup(ctx context.Context, req *agentproto.UpdateStartupRequest) (*agentproto.Startup, error)

+ type LogsAPI struct

+ AgentFn func(context.Context) (database.WorkspaceAgent, error)

+ Database database.Store

+ Log slog.Logger

+ PublishWorkspaceAgentLogsUpdateFn func(ctx context.Context, workspaceAgentID uuid.UUID, ...)

+ PublishWorkspaceUpdateFn func(context.Context, *database.WorkspaceAgent) error

+ func (a *LogsAPI) BatchCreateLogs(ctx context.Context, req *agentproto.BatchCreateLogsRequest) (*agentproto.BatchCreateLogsResponse, error)

+ type ManifestAPI struct

+ AccessURL *url.URL

+ AgentFallbackTroubleshootingURL string

+ AgentFn func(context.Context) (database.WorkspaceAgent, error)

+ AgentInactiveDisconnectTimeout time.Duration

+ AppHostname string

+ Database database.Store

+ DerpForceWebSockets bool

+ DerpMapFn func() *tailcfg.DERPMap

+ DisableDirectConnections bool

+ ExternalAuthConfigs []*externalauth.Config

+ TailnetCoordinator *atomic.Pointer[tailnet.Coordinator]

+ func (a *ManifestAPI) GetManifest(ctx context.Context, _ *agentproto.GetManifestRequest) (*agentproto.Manifest, error)

+ type MetadataAPI struct

+ AgentFn func(context.Context) (database.WorkspaceAgent, error)

+ Database database.Store

+ Log slog.Logger

+ Pubsub pubsub.Pubsub

+ func (a *MetadataAPI) BatchUpdateMetadata(ctx context.Context, req *agentproto.BatchUpdateMetadataRequest) (*agentproto.BatchUpdateMetadataResponse, error)

+ type Options struct

+ AccessURL *url.URL

+ AgentFallbackTroubleshootingURL string

+ AgentID uuid.UUID

+ AgentInactiveDisconnectTimeout time.Duration

+ AgentStatsRefreshInterval time.Duration

+ AppHostname string

+ Ctx context.Context

+ Database database.Store

+ DerpForceWebSockets bool

+ DerpMapFn func() *tailcfg.DERPMap

+ DerpMapUpdateFrequency time.Duration

+ DisableDirectConnections bool

+ ExternalAuthConfigs []*externalauth.Config

+ Log slog.Logger

+ PublishWorkspaceAgentLogsUpdateFn func(ctx context.Context, workspaceAgentID uuid.UUID, ...)

+ PublishWorkspaceUpdateFn func(ctx context.Context, workspaceID uuid.UUID)

+ Pubsub pubsub.Pubsub

+ StatsBatcher *batchstats.Batcher

+ TailnetCoordinator *atomic.Pointer[tailnet.Coordinator]

+ TemplateScheduleStore *atomic.Pointer[schedule.TemplateScheduleStore]

+ UpdateAgentMetricsFn func(ctx context.Context, labels prometheusmetrics.AgentMetricLabels, ...)

+ WorkspaceID uuid.UUID

+ type ServiceBannerAPI struct

+ Database database.Store

+ func (a *ServiceBannerAPI) GetServiceBanner(ctx context.Context, _ *agentproto.GetServiceBannerRequest) (*agentproto.ServiceBanner, error)

+ type StatsAPI struct

+ AgentFn func(context.Context) (database.WorkspaceAgent, error)

+ AgentStatsRefreshInterval time.Duration

+ Database database.Store

+ Log slog.Logger

+ StatsBatcher *batchstats.Batcher

+ TemplateScheduleStore *atomic.Pointer[schedule.TemplateScheduleStore]

+ UpdateAgentMetricsFn func(ctx context.Context, labels prometheusmetrics.AgentMetricLabels, ...)

+ func (a *StatsAPI) UpdateStats(ctx context.Context, req *agentproto.UpdateStatsRequest) (*agentproto.UpdateStatsResponse, error)

+ type TailnetAPI struct

+ Ctx context.Context

+ DerpMapFn func() *tailcfg.DERPMap

+ DerpMapUpdateFrequency time.Duration

+ func (*TailnetAPI) CoordinateTailnet(_ agentproto.DRPCAgent_CoordinateTailnetStream) error

+ func (a *TailnetAPI) StreamDERPMaps(_ *tailnetproto.StreamDERPMapsRequest, ...) error

+ type WorkspaceAgentMetadataChannelPayload struct

+ CollectedAt time.Time

+ Keys []string