Affected by GO-2022-1062 and 9 other vulnerabilities

GO-2022-1062: Nomad Panics On Job Submission With Bad Artifact Stanza Source URL in github.com/hashicorp/nomad

GO-2024-2670: ACL security vulnerability in github.com/hashicorp/nomad

GO-2024-3073: Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking in github.com/hashicorp/nomad

GO-2024-3262: Hashicorp Nomad Incorrect Authorization vulnerability in github.com/hashicorp/nomad

GO-2024-3354: Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad

GO-2025-3510: Unintentional exposure of the workload identity token and client secret in logs in github.com/hashicorp/nomad

GO-2025-3758: Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad

GO-2026-4278: HashiCorp Nomad is vulnerable to path escape through archive unpacking during migration in github.com/hashicorp/nomad

GO-2026-5076: HashiCorp Nomad vulnerable to symlink attack in github.com/hashicorp/nomad

GO-2026-5445: HashiCorp Nomad vulnerable to a path traversal in github.com/hashicorp/nomad

getter

package

v1.2.8 Latest Latest Go to latest Published: May 19, 2022 License: MPL-2.0 Imports: 13 Imported by: 22

Details

This section is empty.

This section is empty.

This section is empty.

type GetError struct {
	URL string
	Err error
	// contains filtered or unexported fields
}

GetError wraps the underlying artifact fetching error with the URL. It implements the RecoverableError interface.

func (g *GetError) Error() string

func (g *GetError) IsRecoverable() bool

type Getter struct {
	// contains filtered or unexported fields
}

Getter wraps go-getter calls in an artifact configuration.

func NewGetter(config *config.ArtifactConfig) *Getter

NewGetter returns a new Getter instance. This function is called once per client and shared across alloc and task runners.

func TestDefaultGetter(t *testing.T) *Getter

func (g *Getter) GetArtifact(taskEnv interfaces.EnvReplacer, artifact *structs.TaskArtifact) error

GetArtifact downloads an artifact into the specified task directory.