Affected by GO-2022-0560 and 15 other vulnerabilities

GO-2022-0560: Nomad Spread Job Stanza May Trigger Panic in Servers in github.com/hashicorp/nomad

GO-2022-0573: Improper Authentication in HashiCorp Nomad in github.com/hashicorp/nomad

GO-2022-0577: HashiCorp Nomad vulnerable to Allocation of Resources Without Limits or Throttling in github.com/hashicorp/nomad

GO-2022-0584: Arbitrary file reads in HashiCorp Nomad in github.com/hashicorp/nomad

GO-2022-0600: HashiCorp Nomad Artifact Download Race Condition in github.com/hashicorp/nomad

GO-2022-0732: Privilege escalation in Hashicorp Nomad in github.com/hashicorp/nomad

GO-2022-1062: Nomad Panics On Job Submission With Bad Artifact Stanza Source URL in github.com/hashicorp/nomad

GO-2024-2670: ACL security vulnerability in github.com/hashicorp/nomad

GO-2024-3073: Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking in github.com/hashicorp/nomad

GO-2024-3262: Hashicorp Nomad Incorrect Authorization vulnerability in github.com/hashicorp/nomad

GO-2024-3354: Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad

GO-2025-3510: Unintentional exposure of the workload identity token and client secret in logs in github.com/hashicorp/nomad

GO-2025-3758: Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad

GO-2026-4278: HashiCorp Nomad is vulnerable to path escape through archive unpacking during migration in github.com/hashicorp/nomad

GO-2026-5076: HashiCorp Nomad vulnerable to symlink attack in github.com/hashicorp/nomad

GO-2026-5445: HashiCorp Nomad vulnerable to a path traversal in github.com/hashicorp/nomad

getter

package

v1.2.0 Latest Latest Go to latest Published: Nov 15, 2021 License: MPL-2.0 Imports: 8 Imported by: 22

Details

This section is empty.

This section is empty.

func GetArtifact(taskEnv EnvReplacer, artifact *structs.TaskArtifact) error

GetArtifact downloads an artifact into the specified task directory.

type EnvReplacer interface {
	ReplaceEnv(string) string
	ClientPath(string, bool) (string, bool)
}

EnvReplacer is an interface which can interpolate environment variables and is usually satisfied by taskenv.TaskEnv.

type GetError struct {
	URL string
	Err error
	// contains filtered or unexported fields
}

GetError wraps the underlying artifact fetching error with the URL. It implements the RecoverableError interface.

func (g *GetError) Error() string

func (g *GetError) IsRecoverable() bool