prebuilds

Nov 12, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 11, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 10, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 4, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

type ActionType

+ const ActionTypeCancelPending

type GlobalSnapshot

+ PendingPrebuilds []database.CountPendingNonActivePrebuildsRow

type PresetSnapshot

+ PendingCount int

+ type ReconcileStats struct

+ Elapsed time.Duration

Nov 12, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 11, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 10, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 30, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 28, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 16, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 2, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 10, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 28, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 16, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 1, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Sep 3, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ func FindMatchingPresetID(ctx context.Context, store database.Store, templateVersionID uuid.UUID, ...) (uuid.UUID, error)

Oct 1, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Sep 3, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 7, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 5, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Sep 4, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 7, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 15, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 2, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 1, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ func MatchesCron(cronExpression string, at time.Time) (bool, error)

type GlobalSnapshot

+ HardLimitedPresetsMap map[uuid.UUID]database.GetPresetsAtFailureLimitRow

+ PrebuildSchedules []database.TemplateVersionPresetPrebuildSchedule

+ func (s GlobalSnapshot) IsHardLimited(presetID uuid.UUID) bool

type PresetSnapshot

+ PrebuildSchedules []database.TemplateVersionPresetPrebuildSchedule

+ func NewPresetSnapshot(preset database.GetTemplatePresetsWithPrebuildsRow, ...) PresetSnapshot

+ func (p PresetSnapshot) CalculateDesiredInstances(at time.Time) int32

Aug 7, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 15, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 8, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 30, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 10, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 3, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

type GlobalSnapshot

+ HardLimitedPresets []database.GetPresetsAtFailureLimitRow

type PresetSnapshot

+ Expired []database.GetRunningPrebuiltWorkspacesRow

+ IsHardLimited bool

type ReconciliationState

+ Expired int32

May 20, 2025 GO-2025-3921 +2 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

May 15, 2025 GO-2025-3921 +2 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ var ErrAGPLDoesNotSupportPrebuiltWorkspaces = xerrors.New("prebuilt workspaces functionality is not supported under the AGPL license")

+ var ErrNoClaimablePrebuiltWorkspaces = xerrors.New("no claimable prebuilt workspaces found")

+ func GenerateName() (string, error)

+ type ActionType int

+ const ActionTypeBackoff

+ const ActionTypeCreate

+ const ActionTypeDelete

+ const ActionTypeUndefined

+ type Claimer interface

+ Claim func(ctx context.Context, userID uuid.UUID, name string, presetID uuid.UUID) (*uuid.UUID, error)

+ Initiator func() uuid.UUID

+ var DefaultClaimer Claimer = NoopClaimer{}

+ type GlobalSnapshot struct

+ Backoffs []database.GetPresetsBackoffRow

+ PrebuildsInProgress []database.CountInProgressPrebuildsRow

+ Presets []database.GetTemplatePresetsWithPrebuildsRow

+ RunningPrebuilds []database.GetRunningPrebuiltWorkspacesRow

+ func NewGlobalSnapshot(presets []database.GetTemplatePresetsWithPrebuildsRow, ...) GlobalSnapshot

+ func (s GlobalSnapshot) FilterByPreset(presetID uuid.UUID) (*PresetSnapshot, error)

+ type NoopClaimer struct

+ func (NoopClaimer) Claim(context.Context, uuid.UUID, string, uuid.UUID) (*uuid.UUID, error)

+ func (NoopClaimer) Initiator() uuid.UUID

+ type NoopReconciler struct

+ func (NoopReconciler) CalculateActions(context.Context, PresetSnapshot) (*ReconciliationActions, error)

+ func (NoopReconciler) ReconcileAll(context.Context) error

+ func (NoopReconciler) ReconcilePreset(context.Context, PresetSnapshot) error

+ func (NoopReconciler) Run(context.Context)

+ func (NoopReconciler) SnapshotState(context.Context, database.Store) (*GlobalSnapshot, error)

+ func (NoopReconciler) Stop(context.Context, error)

+ func (NoopReconciler) TrackResourceReplacement(context.Context, uuid.UUID, uuid.UUID, []*sdkproto.ResourceReplacement)

+ type PresetSnapshot struct

+ Backoff *database.GetPresetsBackoffRow

+ InProgress []database.CountInProgressPrebuildsRow

+ Preset database.GetTemplatePresetsWithPrebuildsRow

+ Running []database.GetRunningPrebuiltWorkspacesRow

+ func (p PresetSnapshot) CalculateActions(clock quartz.Clock, backoffInterval time.Duration) (*ReconciliationActions, error)

+ func (p PresetSnapshot) CalculateState() *ReconciliationState

+ type PubsubWorkspaceClaimListener struct

+ func NewPubsubWorkspaceClaimListener(ps pubsub.Pubsub, logger slog.Logger) *PubsubWorkspaceClaimListener

+ func (p PubsubWorkspaceClaimListener) ListenForWorkspaceClaims(ctx context.Context, workspaceID uuid.UUID, ...) (func(), error)

+ type PubsubWorkspaceClaimPublisher struct

+ func NewPubsubWorkspaceClaimPublisher(ps pubsub.Pubsub) *PubsubWorkspaceClaimPublisher

+ func (p PubsubWorkspaceClaimPublisher) PublishWorkspaceClaim(claim agentsdk.ReinitializationEvent) error

+ type Reconciler interface

+ ReconcileAll func(ctx context.Context) error

+ type ReconciliationActions struct

+ ActionType ActionType

+ BackoffUntil time.Time

+ Create int32

+ DeleteIDs []uuid.UUID

+ func (ra *ReconciliationActions) IsNoop() bool

+ type ReconciliationOrchestrator interface

+ Run func(ctx context.Context)

+ Stop func(ctx context.Context, cause error)

+ TrackResourceReplacement func(ctx context.Context, workspaceID, buildID uuid.UUID, ...)

+ var DefaultReconciler ReconciliationOrchestrator = NoopReconciler{}

+ type ReconciliationState struct

+ Actual int32

+ Deleting int32

+ Desired int32

+ Eligible int32

+ Extraneous int32

+ Starting int32

+ Stopping int32

+ type StateSnapshotter interface

+ SnapshotState func(ctx context.Context, store database.Store) (*GlobalSnapshot, error)

Apr 29, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 24, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 23, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 2, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ var SystemUserID = uuid.MustParse("c42fdf75-3097-471c-8c33-fb52454d81c0")