Affected by GO-2023-1707 and 10 other vulnerabilities

GO-2023-1707: HashiCorp Nomad vulnerable to unauthenticated client agent HTTP request privilege escalation in github.com/hashicorp/nomad

GO-2024-2669: API token secret ID leak to Sentinel in github.com/hashicorp/nomad

GO-2024-2670: ACL security vulnerability in github.com/hashicorp/nomad

GO-2024-3073: Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking in github.com/hashicorp/nomad

GO-2024-3262: Hashicorp Nomad Incorrect Authorization vulnerability in github.com/hashicorp/nomad

GO-2024-3354: Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad

GO-2025-3510: Unintentional exposure of the workload identity token and client secret in logs in github.com/hashicorp/nomad

GO-2025-3758: Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad

GO-2026-4278: HashiCorp Nomad is vulnerable to path escape through archive unpacking during migration in github.com/hashicorp/nomad

GO-2026-5076: HashiCorp Nomad vulnerable to symlink attack in github.com/hashicorp/nomad

GO-2026-5445: HashiCorp Nomad vulnerable to a path traversal in github.com/hashicorp/nomad

getter

package

v1.5.2 Latest Latest Go to latest Published: Mar 21, 2023 License: MPL-2.0 Imports: 34 Imported by: 22

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/hashicorp/nomad

Links

Open Source Insights

Documentation ¶

Rendered for

Index ¶

Constants
func SetupDir(t *testing.T) (string, string)
type Error
type Sandbox
- func New(ac *config.ArtifactConfig, logger hclog.Logger) *Sandbox
- func TestSandbox(t *testing.T) *Sandbox
- func (s *Sandbox) Get(env interfaces.EnvReplacer, artifact *structs.TaskArtifact) error

Constants ¶

View Source

const (
	// SubCommand is the first argument to the clone of the nomad
	// agent process for downloading artifacts.
	SubCommand = "artifact-isolation"
)

Variables ¶

This section is empty.

Functions ¶

func SetupDir ¶ added in v1.5.0

func SetupDir(t *testing.T) (string, string)

SetupDir creates a directory suitable for testing artifact - i.e. it is owned by the nobody user as would be the case in a normal client operation.

returns alloc_dir, task_dir

Types ¶

type Error ¶ added in v1.5.0

type Error struct {
	URL         string
	Err         error
	Recoverable bool
}

Error is a RecoverableError used to include the URL along with the underlying fetching error.

func (*Error) Equal ¶ added in v1.5.0

func (e *Error) Equal(o *Error) bool

func (*Error) Error ¶ added in v1.5.0

func (e *Error) Error() string

func (*Error) IsRecoverable ¶ added in v1.5.0

func (e *Error) IsRecoverable() bool

type Sandbox ¶ added in v1.5.0

type Sandbox struct {
	// contains filtered or unexported fields
}

A Sandbox is used to download artifacts.

func New ¶ added in v1.5.0

func New(ac *config.ArtifactConfig, logger hclog.Logger) *Sandbox

New creates a Sandbox with the given ArtifactConfig.

func TestSandbox ¶ added in v1.5.0

func TestSandbox(t *testing.T) *Sandbox

TestSandbox creates a real artifact downloader configured via the default artifact config. It is good enough for tests so no mock implementation exists.

func (*Sandbox) Get ¶ added in v1.5.0

func (s *Sandbox) Get(env interfaces.EnvReplacer, artifact *structs.TaskArtifact) error

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL