GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Why Go
  • Case Studies
  • Use Cases
  • Security
  • Learn
  • Effective Go
  • Go User Manual
  • Standard library
  • Release Notes
  • API
  • Packages
  • Recorded Talks
  • Meetups
  • Conferences

This view

  • Original page
  • New address

GeezerVison is showing pkg.go.dev — coder module - github.com/coder/coder - Go Packages

Alert  Affected by GO-2024-3228 and 26 other vulnerabilities
Alert  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder
Alert  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder
Alert  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder
Alert  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder
Alert  GO-2026-5169: Coder: Unauthenticated SSRF via Azure Instance Identity Endpoint in github.com/coder/coder
Alert  GO-2026-5196: Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft in github.com/coder/coder
Alert  GO-2026-5897: Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent in github.com/coder/coder
Alert  GO-2026-5906: Coder: User-admin role can reset owner account password in github.com/coder/coder
Alert  GO-2026-5907: Coder's OIDC email_verified type coercion bypass enables account takeover via unverified email linking in github.com/coder/coder
Alert  GO-2026-5908: Coder vulnerable to OIDC account takeover via email-based user matching and email_verified bypass in github.com/coder/coder
Alert  GO-2026-5909: Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID in github.com/coder/coder
Alert  GO-2026-5911: Coder's unbounded memory allocation in provisioner file upload allows authenticated denial of service in github.com/coder/coder
Alert  GO-2026-5913: Coder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh` in github.com/coder/coder
Alert  GO-2026-5915: Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator in github.com/coder/coder
Alert  GO-2026-5916: Coder: Zip upload decompression lacks aggregate size limit, enabling denial of service in github.com/coder/coder
Alert  GO-2026-5917: Coder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, enabling cross-app data access in github.com/coder/coder
Alert  GO-2026-5918: Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing in github.com/coder/coder
Alert  GO-2026-5919: Coder vulnerable to stored HTML injection via workspace agent logs in AgentLogLine component in github.com/coder/coder
Alert  GO-2026-5920: Coder's AI Bridge Proxy skips TLS certificate verification in default configuration in github.com/coder/coder
Alert  GO-2026-5921: Coder vulnerable to denial of service via unbounded request body in AI Bridge provider endpoints in github.com/coder/coder
Alert  GO-2026-5922: Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers in github.com/coder/coder
Alert  GO-2026-5923: Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write in github.com/coder/coder
Alert  GO-2026-5924: Coder's session token leaked to arbitrary hosts via `coder open app` for external workspace apps in github.com/coder/coder
Alert  GO-2026-5925: Suspended Coder users retain access to AI Bridge LLM proxy endpoints in github.com/coder/coder
Alert  GO-2026-5926: Coder's sub-agent app registration bypasses template port-sharing policy enforcement in github.com/coder/coder
Alert  GO-2026-6265: Coder: Login endpoint user enumeration via timing-defense placeholder in password comparison in github.com/coder/coder
Alert  GO-2026-6267: Coder: Stored HTML injection via unescaped ApplicationName and LogoURL appearance settings in github.com/coder/coder
Notice  The highest tagged major version is v2.

Details

  • checked Valid go.mod file

    The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.

  • checked Redistributable license

    Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.

  • checked Tagged version

    Modules with tagged versions give importers more predictable builds.

  • unchecked Stable version

    When a project reaches major version v1 it is considered stable.

  • Learn more about best practices

Repository

github.com/coder/coder

Links

  • Open Source Insights Logo Open Source Insights

README ¶

Self-Hosted Remote Development Environments



Quickstart | Docs | Why Coder | Enterprise

discord codecov release godoc Go Report Card license

Coder enables organizations to set up development environments in the cloud. Environments are defined with Terraform, connected through a secure high-speed Wireguard® tunnel, and are automatically shut down when not in use to save on costs. Coder gives engineering teams the flexibility to use the cloud for workloads that are most beneficial to them.

  • Define development environments in Terraform
    • EC2 VMs, Kubernetes Pods, Docker Containers, etc.
  • Automatically shutdown idle resources to save on costs
  • Onboard developers in seconds instead of days

Quickstart

The most convenient way to try Coder is to install it on your local machine and experiment with provisioning development environments using Docker (works on Linux, macOS, and Windows).

# First, install Coder
curl -L https://coder.com/install.sh | sh

# Start the Coder server (caches data in ~/.cache/coder)
coder server

# Navigate to http://localhost:3000 to create your initial user
# Create a Docker template, and provision a workspace

Install

The easiest way to install Coder is to use our install script for Linux and macOS. For Windows, use the latest ..._installer.exe file from GitHub Releases.

curl -L https://coder.com/install.sh | sh

You can run the install script with --dry-run to see the commands that will be used to install without executing them. You can modify the installation process by including flags. Run the install script with --help for reference.

See install for additional methods.

Once installed, you can start a production deployment1 with a single command:

# Automatically sets up an external access URL on *.try.coder.app
coder server

# Requires a PostgreSQL instance (version 13 or higher) and external access URL
coder server --postgres-url <url> --access-url <url>

1 For production deployments, set up an external PostgreSQL instance for reliability.

Use coder --help to get a list of flags and environment variables. Use our install guides for a full walkthrough.

Documentation

Browse our docs here or visit a specific section below:

  • Templates: Templates are written in Terraform and describe the infrastructure for workspaces
  • Workspaces: Workspaces contain the IDEs, dependencies, and configuration information needed for software development
  • IDEs: Connect your existing editor to a workspace
  • Administration: Learn how to operate Coder
  • Enterprise: Learn about our paid features built for large teams

Community and Support

Feel free to open an issue if you have questions, run into bugs, or have a feature request.

Join our Discord to provide feedback on in-progress features, and chat with the community using Coder!

Contributing

Contributions are welcome! Read the contributing docs to get started.

Find our list of contributors here.

Related

We are always working on new integrations. Feel free to open an issue to request an integration. Contributions are welcome in any official or community repositories.

Official

  • VS Code Extension: Open any Coder workspace in VS Code with a single click
  • JetBrains Gateway Extension: Open any Coder workspace in JetBrains Gateway with a single click
  • Self-Hosted VS Code Extension Marketplace: A private extension marketplace that works in restricted or airgapped networks integrating with code-server.

Community

  • Provision Coder with Terraform: Provision Coder on Google GKE, Azure AKS, AWS EKS, DigitalOcean DOKS, IBMCloud K8s, OVHCloud K8s, and Scaleway K8s Kapsule with Terraform
  • Coder GitHub Action: A GitHub Action that updates Coder templates
  • Various Templates: Hetzner Cloud, Docker in Docker, and other templates the community has built.

Directories ¶

Path Synopsis
agent
agentssh
agenttest
reaper
Package reaper contains logic for reaping subprocesses.
Package reaper contains logic for reaping subprocesses.
usershell
buildinfo
cli
clibase
Package clibase offers an all-in-one solution for a highly configurable CLI application.
Package clibase offers an all-in-one solution for a highly configurable CLI application.
clistat
clitest
cliui
config
cmd
cliui command
coder command
coderd
apidoc
Package apidoc GENERATED BY SWAG; DO NOT EDIT This file was generated by swaggo/swag
Package apidoc GENERATED BY SWAG; DO NOT EDIT This file was generated by swaggo/swag
apikey
audit
autobuild
Package autobuild contains logic for scheduling workspace builds in the background.
Package autobuild contains logic for scheduling workspace builds in the background.
autobuild/notify
awsidentity
azureidentity
coderdtest
database
Package database connects to external services for stateful storage.
Package database connects to external services for stateful storage.
database/db2sdk
Package db2sdk provides common conversion routines from database types to codersdk types
Package db2sdk provides common conversion routines from database types to codersdk types
database/dbauthz
Package dbauthz provides an authorization layer on top of the database.
Package dbauthz provides an authorization layer on top of the database.
database/dbfake
database/dbgen
database/dbmetrics
Code generated by coderd/database/gen/metrics.
Code generated by coderd/database/gen/metrics.
database/dbmock
Package dbmock is a generated GoMock package.
Package dbmock is a generated GoMock package.
database/dbpurge
database/dbtestutil
database/gen/dump command
database/migrations
database/postgres
database/pubsub
devtunnel
gitauth
gitsshkey
healthcheck
httpapi
httpmw
httpmw/patternmatcher
metricscache
parameter
prometheusmetrics
provisionerdserver
rbac
Code generated by rbacgen/main.go.
Code generated by rbacgen/main.go.
rbac/regosql
Package regosql converts rego queries into SQL WHERE clauses.
Package regosql converts rego queries into SQL WHERE clauses.
rbac/regosql/sqltypes
Package sqltypes contains the types used to convert rego queries into SQL.
Package sqltypes contains the types used to convert rego queries into SQL.
schedule
package schedule provides utilities for managing template and workspace autostart and autostop schedules.
package schedule provides utilities for managing template and workspace autostart and autostop schedules.
searchquery
telemetry
tracing
unhanger
updatecheck
Package updatecheck provides a mechanism for periodically checking for updates to Coder.
Package updatecheck provides a mechanism for periodically checking for updates to Coder.
userpassword
util/ptr
Package ptr contains some utility methods related to pointers.
Package ptr contains some utility methods related to pointers.
util/slice
util/strings
util/tz
Package tz includes utilities for cross-platform timezone/location detection.
Package tz includes utilities for cross-platform timezone/location detection.
util/xio
workspaceapps
workspaceapps/apptest
wsbuilder
Package wsbuilder provides the Builder object, which encapsulates the common business logic of inserting a new workspace build into the database.
Package wsbuilder provides the Builder object, which encapsulates the common business logic of inserting a new workspace build into the database.
wsconncache
Package wsconncache caches workspace agent connections by UUID.
Package wsconncache caches workspace agent connections by UUID.
codersdk
agentsdk
cryptorand
enterprise
audit
audit/audittest
audit/backends
cli
cmd/coder command
coderd
coderd/coderdenttest
coderd/license
coderd/proxyhealth
coderd/schedule
derpmesh
replicasync
tailnet
trialer
wsproxy
wsproxy/wsproxysdk
examples
provisioner
echo
terraform
provisionerd
proto
runner
provisionersdk
proto
pty
ptytest
scaletest
agentconn
createworkspaces
harness
loadtestutil
placebo
reconnectingpty
workspacebuild
workspacetraffic
scripts
Package gorules defines custom lint rules for ruleguard.
Package gorules defines custom lint rules for ruleguard.
apidocgen/postprocess command
apitypings command
auditdocgen command
audittypegen command
ci-report command
clidocgen command
dbgen command
metricsdocgen command
migrate-ci command
rbacgen command
site
tailnet
tailnettest
Package tailnettest is a generated GoMock package.
Package tailnettest is a generated GoMock package.
testutil
Click to show internal directories.
Click to hide internal directories.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.