coder module - github.com/coder/coder - Go Packages

Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

Why Go
Why Go
Learn
Docs
Docs
Packages
Community
Community
- Recorded Talks
- Meetups
- Conferences
- Go blog
- Go project
- Get connected

Affected by GO-2024-3228 and 24 other vulnerabilities

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

GO-2026-5169: Coder: Unauthenticated SSRF via Azure Instance Identity Endpoint in github.com/coder/coder

GO-2026-5196: Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft in github.com/coder/coder

GO-2026-5897: Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent in github.com/coder/coder

GO-2026-5906: Coder: User-admin role can reset owner account password in github.com/coder/coder

GO-2026-5907: Coder's OIDC email_verified type coercion bypass enables account takeover via unverified email linking in github.com/coder/coder

GO-2026-5908: Coder vulnerable to OIDC account takeover via email-based user matching and email_verified bypass in github.com/coder/coder

GO-2026-5909: Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID in github.com/coder/coder

GO-2026-5911: Coder's unbounded memory allocation in provisioner file upload allows authenticated denial of service in github.com/coder/coder

GO-2026-5913: Coder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh` in github.com/coder/coder

GO-2026-5915: Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator in github.com/coder/coder

GO-2026-5916: Coder: Zip upload decompression lacks aggregate size limit, enabling denial of service in github.com/coder/coder

GO-2026-5917: Coder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, enabling cross-app data access in github.com/coder/coder

GO-2026-5918: Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing in github.com/coder/coder

GO-2026-5919: Coder vulnerable to stored HTML injection via workspace agent logs in AgentLogLine component in github.com/coder/coder

GO-2026-5920: Coder's AI Bridge Proxy skips TLS certificate verification in default configuration in github.com/coder/coder

GO-2026-5921: Coder vulnerable to denial of service via unbounded request body in AI Bridge provider endpoints in github.com/coder/coder

GO-2026-5922: Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers in github.com/coder/coder

GO-2026-5923: Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write in github.com/coder/coder

GO-2026-5924: Coder's session token leaked to arbitrary hosts via `coder open app` for external workspace apps in github.com/coder/coder

GO-2026-5925: Suspended Coder users retain access to AI Bridge LLM proxy endpoints in github.com/coder/coder

GO-2026-5926: Coder's sub-agent app registration bypasses template port-sharing policy enforcement in github.com/coder/coder

The highest tagged major version is v2.

coder

module

v0.27.3 Latest Latest

This package is not in the latest version of its module.

Go to latest Published: Aug 1, 2023 License: AGPL-3.0

Main Versions Licenses

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/coder/coder

README ¶

Self-Hosted Remote Development Environments

Quickstart | Docs | Why Coder | Enterprise

Coder enables organizations to set up development environments in the cloud. Environments are defined with Terraform, connected through a secure high-speed Wireguard® tunnel, and are automatically shut down when not in use to save on costs. Coder gives engineering teams the flexibility to use the cloud for workloads that are most beneficial to them.

Define development environments in Terraform
- EC2 VMs, Kubernetes Pods, Docker Containers, etc.
Automatically shutdown idle resources to save on costs
Onboard developers in seconds instead of days

Quickstart

The most convenient way to try Coder is to install it on your local machine and experiment with provisioning development environments using Docker (works on Linux, macOS, and Windows).

# First, install Coder curl -L https://coder.com/install.sh | sh # Start the Coder server (caches data in ~/.cache/coder) coder server # Navigate to http://localhost:3000 to create your initial user # Create a Docker template, and provision a workspace

Install

The easiest way to install Coder is to use our install script for Linux and macOS. For Windows, use the latest ..._installer.exe file from GitHub Releases.

curl -L https://coder.com/install.sh | sh

You can run the install script with --dry-run to see the commands that will be used to install without executing them. You can modify the installation process by including flags. Run the install script with --help for reference.

See install for additional methods.

Once installed, you can start a production deployment1 with a single command:

# Automatically sets up an external access URL on *.try.coder.app coder server # Requires a PostgreSQL instance (version 13 or higher) and external access URL coder server --postgres-url <url> --access-url <url>

1 For production deployments, set up an external PostgreSQL instance for reliability.

Use coder --help to get a list of flags and environment variables. Use our install guides for a full walkthrough.

Documentation

Browse our docs here or visit a specific section below:

Templates: Templates are written in Terraform and describe the infrastructure for workspaces
Workspaces: Workspaces contain the IDEs, dependencies, and configuration information needed for software development
IDEs: Connect your existing editor to a workspace
Administration: Learn how to operate Coder
Enterprise: Learn about our paid features built for large teams

Community and Support

Feel free to open an issue if you have questions, run into bugs, or have a feature request.

Join our Discord to provide feedback on in-progress features, and chat with the community using Coder!

Contributing

Contributions are welcome! Read the contributing docs to get started.

Find our list of contributors here.

We are always working on new integrations. Feel free to open an issue to request an integration. Contributions are welcome in any official or community repositories.

Official

VS Code Extension: Open any Coder workspace in VS Code with a single click
JetBrains Gateway Extension: Open any Coder workspace in JetBrains Gateway with a single click
Self-Hosted VS Code Extension Marketplace: A private extension marketplace that works in restricted or airgapped networks integrating with code-server.

Community

Provision Coder with Terraform: Provision Coder on Google GKE, Azure AKS, AWS EKS, DigitalOcean DOKS, IBMCloud K8s, OVHCloud K8s, and Scaleway K8s Kapsule with Terraform
Coder GitHub Action: A GitHub Action that updates Coder templates
Various Templates: Hetzner Cloud, Docker in Docker, and other templates the community has built.

Expand ▾ Collapse ▴

Directories ¶

Show internal Expand all

Path Synopsis

agent
agentssh
agenttest
reaper Package reaper contains logic for reaping subprocesses.	Package reaper contains logic for reaping subprocesses.
usershell
buildinfo
cli
clibase Package clibase offers an all-in-one solution for a highly configurable CLI application.	Package clibase offers an all-in-one solution for a highly configurable CLI application.
clistat
clitest
cliui
config
cmd
cliui command
coder command
coderd
apidoc Package apidoc GENERATED BY SWAG; DO NOT EDIT This file was generated by swaggo/swag	Package apidoc GENERATED BY SWAG; DO NOT EDIT This file was generated by swaggo/swag
apikey
audit
autobuild Package autobuild contains logic for scheduling workspace builds in the background.	Package autobuild contains logic for scheduling workspace builds in the background.
autobuild/notify
awsidentity
azureidentity
coderdtest
database Package database connects to external services for stateful storage.	Package database connects to external services for stateful storage.
database/db2sdk Package db2sdk provides common conversion routines from database types to codersdk types	Package db2sdk provides common conversion routines from database types to codersdk types
database/dbauthz Package dbauthz provides an authorization layer on top of the database.	Package dbauthz provides an authorization layer on top of the database.
database/dbfake
database/dbgen
database/dbmetrics Code generated by coderd/database/gen/metrics.	Code generated by coderd/database/gen/metrics.
database/dbmock Package dbmock is a generated GoMock package.	Package dbmock is a generated GoMock package.
database/dbpurge
database/dbtestutil
database/gen/dump command
database/migrations
database/postgres
database/pubsub
devtunnel
gitauth
gitsshkey
healthcheck
httpapi
httpmw
httpmw/patternmatcher
metricscache
parameter
prometheusmetrics
provisionerdserver
rbac Code generated by rbacgen/main.go.	Code generated by rbacgen/main.go.
rbac/regosql Package regosql converts rego queries into SQL WHERE clauses.	Package regosql converts rego queries into SQL WHERE clauses.
rbac/regosql/sqltypes Package sqltypes contains the types used to convert rego queries into SQL.	Package sqltypes contains the types used to convert rego queries into SQL.
schedule package schedule provides utilities for managing template and workspace autostart and autostop schedules.	package schedule provides utilities for managing template and workspace autostart and autostop schedules.
searchquery
telemetry
tracing
unhanger
updatecheck Package updatecheck provides a mechanism for periodically checking for updates to Coder.	Package updatecheck provides a mechanism for periodically checking for updates to Coder.
userpassword
util/ptr Package ptr contains some utility methods related to pointers.	Package ptr contains some utility methods related to pointers.
util/slice
util/strings
util/tz Package tz includes utilities for cross-platform timezone/location detection.	Package tz includes utilities for cross-platform timezone/location detection.
util/xio
workspaceapps
workspaceapps/apptest
wsbuilder Package wsbuilder provides the Builder object, which encapsulates the common business logic of inserting a new workspace build into the database.	Package wsbuilder provides the Builder object, which encapsulates the common business logic of inserting a new workspace build into the database.
wsconncache Package wsconncache caches workspace agent connections by UUID.	Package wsconncache caches workspace agent connections by UUID.
codersdk
agentsdk
cryptorand
enterprise
audit
audit/audittest
audit/backends
cli
cmd/coder command
coderd
coderd/coderdenttest
coderd/license
coderd/proxyhealth
coderd/schedule
derpmesh
replicasync
tailnet
trialer
wsproxy
wsproxy/wsproxysdk
examples
provisioner
echo
terraform
provisionerd
proto
runner
provisionersdk
proto
pty
ptytest
scaletest
agentconn
createworkspaces
harness
loadtestutil
placebo
reconnectingpty
workspacebuild
workspacetraffic
scripts Package gorules defines custom lint rules for ruleguard.	Package gorules defines custom lint rules for ruleguard.
apidocgen/postprocess command
apitypings command
auditdocgen command
audittypegen command
ci-report command
clidocgen command
dbgen command
metricsdocgen command
migrate-ci command
rbacgen command
site
tailnet
tailnettest Package tailnettest is a generated GoMock package.	Package tailnettest is a generated GoMock package.
testutil

go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.

Okay

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL

coder

Details

Repository

Links

README ¶

Self-Hosted Remote Development Environments

Quickstart

Install

Documentation

Community and Support

Contributing

Related

Official

Community

Directories ¶

Jump to

Keyboard shortcuts