Security @ daytonaio/daytona

Directory Structure
Entrypoints
API
CLI
UI
Schemas
Build
Test
Security
Bookmarks

.devcontainer
- devcontainer.json
- postcreate.sh
.github
- ISSUE_TEMPLATE
  - bug_report.md
  - feature_request.md
- workflows
- CODEOWNERS
- pull_request_template.md
.vscode
- launch.json
- settings.json
assets
- images
cmd
- daytona
  - config
  - main.go
docs
- workspace_mode
  - daytona.md
  - daytona_agent.md
  - daytona_agent_logs.md
  - daytona_autocomplete.md
  - daytona_docs.md
  - daytona_expose.md
  - daytona_forward.md
  - daytona_info.md
  - daytona_list.md
  - daytona_logs.md
  - daytona_restart.md
  - daytona_start.md
  - daytona_stop.md
  - daytona_version.md
- daytona.md
- daytona_api-key.md
- daytona_api-key_generate.md
- daytona_api-key_list.md
- daytona_api-key_revoke.md
- daytona_autocomplete.md
- daytona_build.md
- daytona_build_delete.md
- daytona_build_info.md
- daytona_build_list.md
- daytona_build_logs.md
- daytona_build_run.md
- daytona_code.md
- daytona_config.md
- daytona_container-registry.md
- daytona_container-registry_delete.md
- daytona_container-registry_list.md
- daytona_container-registry_set.md
- daytona_create.md
- daytona_delete.md
- daytona_docs.md
- daytona_env.md
- daytona_env_list.md
- daytona_env_set.md
- daytona_forward.md
- daytona_git-providers.md
- daytona_git-providers_add.md
- daytona_git-providers_delete.md
- daytona_git-providers_list.md
- daytona_git-providers_update.md
- daytona_ide.md
- daytona_info.md
- daytona_list.md
- daytona_logs.md
- daytona_prebuild.md
- daytona_prebuild_add.md
- daytona_prebuild_delete.md
- daytona_prebuild_info.md
- daytona_prebuild_list.md
- daytona_prebuild_update.md
- daytona_profile.md
- daytona_profile_add.md
- daytona_profile_delete.md
- daytona_profile_edit.md
- daytona_profile_list.md
- daytona_project-config.md
- daytona_project-config_add.md
- daytona_project-config_delete.md
- daytona_project-config_export.md
- daytona_project-config_import.md
- daytona_project-config_info.md
- daytona_project-config_list.md
- daytona_project-config_set-default.md
- daytona_project-config_update.md
- daytona_provider.md
- daytona_provider_install.md
- daytona_provider_list.md
- daytona_provider_uninstall.md
- daytona_provider_update.md
- daytona_purge.md
- daytona_restart.md
- daytona_serve.md
- daytona_server.md
- daytona_server_config.md
- daytona_server_configure.md
- daytona_server_logs.md
- daytona_server_logs_list.md
- daytona_server_restart.md
- daytona_server_start.md
- daytona_server_stop.md
- daytona_ssh.md
- daytona_start.md
- daytona_stop.md
- daytona_target.md
- daytona_target_list.md
- daytona_target_remove.md
- daytona_target_set-default.md
- daytona_target_set.md
- daytona_telemetry.md
- daytona_telemetry_disable.md
- daytona_telemetry_enable.md
- daytona_use.md
- daytona_version.md
- daytona_whoami.md
hack
- builder_image
  - .devcontainer
    - devcontainer.json
- docs
- project_image
- providers
  - manifest.json
- samples
  - index.json
- generate-cli-docs.sh
- get-openvscode-server.sh
- install.sh
- swagger.sh
internal
- apikeys
  - functions.go
  - functions_test.go
- cmd
  - tailscale
    - connection.go
    - forward.go
- constants
- jetbrains
  - ides.go
  - types.go
- testing
  - agent
    - mocks
  - build
    - mocks
      - build_service.go
    - store.go
  - docker
    - mocks
      - api_client.go
      - client.go
    - exec_reader.go
  - git
    - mocks
      - gitservice.go
  - gitprovider
    - mocks
      - git_provider.go
  - logger
    - mocks
      - logger.go
  - provider
    - targets
      - store.go
  - server
- util
- buildinfo.go
- cmd.go
- posthog.go
- workspace_mode.go
pkg
- agent
  - config
    - config.go
  - ssh
  - tailscale
    - server.go
  - toolbox
    - config
      - config.go
    - fs
    - git
    - lsp
    - process
      - execute.go
      - types.go
    - toolbox.go
  - agent.go
  - agent_test.go
  - log.go
  - types.go
- api
  - controllers
    - apikey
      - apikey.go
      - generate.go
    - binary
      - binaries.go
      - get_daytona.go
    - build
      - dto
        
        dto.go
      - build.go
    - containerregistry
      - list.go
      - remove.go
      - set.go
    - gitprovider
    - health
      - health.go
    - log
      - websocket.go
    - profiledata
      - profile_data.go
    - projectconfig
      - prebuild
        
        prebuild.go
        
        process_git_event.go
      - project_config.go
    - provider
      - dto
        
        dto.go
      - install.go
      - list.go
      - targets.go
      - uninstall.go
    - sample
      - sample.go
    - server
      - server.go
    - target
      - list.go
      - remove.go
      - set.go
    - workspace
      - dto
        
        dto.go
      - toolbox
        
        fs.go
        
        git.go
        
        lsp.go
        
        process.go
        
        toolbox.go
      - create.go
      - project.go
      - start.go
      - stop.go
      - workspace.go
    - utils.go
  - docs
  - middlewares
  - server.go
  - validator.go
- apiclient
  - .openapi-generator
    - VERSION
  - api
    - openapi.yaml
  - docs
    - ApiKey.md
    - ApiKeyAPI.md
    - ApikeyApiKeyType.md
    - Build.md
    - BuildAPI.md
    - BuildBuildState.md
    - BuildConfig.md
    - CachedBuild.md
    - CloneTarget.md
    - CompletionContext.md
    - CompletionItem.md
    - CompletionList.md
    - ContainerConfig.md
    - ContainerRegistry.md
    - ContainerRegistryAPI.md
    - CreateBuildDTO.md
    - CreatePrebuildDTO.md
    - CreateProjectConfigDTO.md
    - CreateProjectDTO.md
    - CreateProjectSourceDTO.md
    - CreateProviderTargetDTO.md
    - CreateWorkspaceDTO.md
    - DefaultAPI.md
    - DevcontainerConfig.md
    - ExecuteRequest.md
    - ExecuteResponse.md
    - FRPSConfig.md
    - FileInfo.md
    - FileStatus.md
    - GetRepositoryContext.md
    - GitAddRequest.md
    - GitBranch.md
    - GitBranchRequest.md
    - GitCloneRequest.md
    - GitCommitInfo.md
    - GitCommitRequest.md
    - GitCommitResponse.md
    - GitNamespace.md
    - GitProvider.md
    - GitProviderAPI.md
    - GitPullRequest.md
    - GitRepoRequest.md
    - GitRepository.md
    - GitStatus.md
    - GitUser.md
    - InstallProviderRequest.md
    - ListBranchResponse.md
    - LogFileConfig.md
    - LspCompletionParams.md
    - LspDocumentRequest.md
    - LspLocation.md
    - LspPosition.md
    - LspRange.md
    - LspServerRequest.md
    - LspSymbol.md
    - Match.md
    - NetworkKey.md
    - Position.md
    - PrebuildAPI.md
    - PrebuildConfig.md
    - PrebuildDTO.md
    - ProfileAPI.md
    - ProfileData.md
    - Project.md
    - ProjectConfig.md
    - ProjectConfigAPI.md
    - ProjectDirResponse.md
    - ProjectInfo.md
    - ProjectState.md
    - Provider.md
    - ProviderAPI.md
    - ProviderProviderInfo.md
    - ProviderProviderTargetProperty.md
    - ProviderProviderTargetPropertyType.md
    - ProviderTarget.md
    - ReplaceRequest.md
    - ReplaceResult.md
    - RepositoryUrl.md
    - Sample.md
    - SampleAPI.md
    - SearchFilesResponse.md
    - ServerAPI.md
    - ServerConfig.md
    - SetGitProviderConfig.md
    - SetProjectState.md
    - SigningMethod.md
    - Status.md
    - TargetAPI.md
    - Workspace.md
    - WorkspaceAPI.md
    - WorkspaceDTO.md
    - WorkspaceInfo.md
    - WorkspaceToolboxAPI.md
  - .gitignore
  - .openapi-generator-ignore
  - README.md
  - api_api_key.go
  - api_build.go
  - api_container_registry.go
  - api_default.go
  - api_git_provider.go
  - api_prebuild.go
  - api_profile.go
  - api_project_config.go
  - api_provider.go
  - api_sample.go
  - api_server.go
  - api_target.go
  - api_workspace.go
  - api_workspace_toolbox.go
  - client.go
  - configuration.go
  - model_api_key.go
  - model_apikey_api_key_type.go
  - model_build.go
  - model_build_build_state.go
  - model_build_config.go
  - model_cached_build.go
  - model_clone_target.go
  - model_completion_context.go
  - model_completion_item.go
  - model_completion_list.go
  - model_container_config.go
  - model_container_registry.go
  - model_create_build_dto.go
  - model_create_prebuild_dto.go
  - model_create_project_config_dto.go
  - model_create_project_dto.go
  - model_create_project_source_dto.go
  - model_create_provider_target_dto.go
  - model_create_workspace_dto.go
  - model_devcontainer_config.go
  - model_execute_request.go
  - model_execute_response.go
  - model_file_info.go
  - model_file_status.go
  - model_frps_config.go
  - model_get_repository_context.go
  - model_git_add_request.go
  - model_git_branch.go
  - model_git_branch_request.go
  - model_git_clone_request.go
  - model_git_commit_info.go
  - model_git_commit_request.go
  - model_git_commit_response.go
  - model_git_namespace.go
  - model_git_provider.go
  - model_git_pull_request.go
  - model_git_repo_request.go
  - model_git_repository.go
  - model_git_status.go
  - model_git_user.go
  - model_install_provider_request.go
  - model_list_branch_response.go
  - model_log_file_config.go
  - model_lsp_completion_params.go
  - model_lsp_document_request.go
  - model_lsp_location.go
  - model_lsp_position.go
  - model_lsp_range.go
  - model_lsp_server_request.go
  - model_lsp_symbol.go
  - model_match.go
  - model_network_key.go
  - model_position.go
  - model_prebuild_config.go
  - model_prebuild_dto.go
  - model_profile_data.go
  - model_project.go
  - model_project_config.go
  - model_project_dir_response.go
  - model_project_info.go
  - model_project_state.go
  - model_provider.go
  - model_provider_provider_info.go
  - model_provider_provider_target_property.go
  - model_provider_provider_target_property_type.go
  - model_provider_target.go
  - model_replace_request.go
  - model_replace_result.go
  - model_repository_url.go
  - model_sample.go
  - model_search_files_response.go
  - model_server_config.go
  - model_set_git_provider_config.go
  - model_set_project_state.go
  - model_signing_method.go
  - model_status.go
  - model_workspace.go
  - model_workspace_dto.go
  - model_workspace_info.go
  - response.go
  - utils.go
- apikey
  - apikey.go
  - store.go
- build
  - detect
    - detect.go
  - devcontainer
    - customizations.go
    - types.go
  - mocks
    - gitprovider_config_store.go
  - build.go
  - builder.go
  - builder_test.go
  - devcontainer.go
  - factory.go
  - logs.go
  - runner.go
  - runner_config.go
  - runner_test.go
  - scheduler.go
  - store.go
- cmd
  - agent
    - agent.go
    - agent_windows.go
    - logs.go
  - apikey
    - api_key.go
    - generate.go
    - list.go
    - revoke.go
  - autocomplete
    - autocomplete.go
  - build
    - build.go
    - delete.go
    - info.go
    - list.go
    - logs.go
    - run.go
  - containerregistry
    - containerregistry.go
    - delete.go
    - list.go
    - set.go
  - format
    - format.go
  - gitprovider
    - add.go
    - delete.go
    - gitprovider.go
    - list.go
    - update.go
  - ports
    - forward.go
  - prebuild
    - add.go
    - delete.go
    - info.go
    - list.go
    - prebuild.go
    - update.go
  - profile
    - add.go
    - delete.go
    - edit.go
    - list.go
    - profile.go
    - use.go
  - profiledata
    - env
      - env.go
      - list.go
      - set.go
  - projectconfig
    - add.go
    - delete.go
    - export.go
    - import.go
    - info.go
    - list.go
    - projectconfig.go
    - setdefault.go
    - update.go
  - provider
    - install.go
    - list.go
    - provider.go
    - uninstall.go
    - update.go
  - server
    - daemon
      - daemon.go
    - logs
      - list.go
      - logs.go
    - config.go
    - configure.go
    - restart.go
    - serve.go
    - server.go
    - stop.go
  - target
    - list.go
    - remove.go
    - set.go
    - setdefault.go
    - target.go
  - telemetry
    - disable.go
    - enable.go
    - telemetry.go
  - workspace
    - util
    - code.go
    - create.go
    - delete.go
    - info.go
    - list.go
    - restart.go
    - ssh-proxy.go
    - ssh.go
    - start.go
    - stop.go
  - workspacemode
    - expose.go
    - forward.go
    - git_cred.go
    - info.go
    - restart.go
    - start.go
    - stop.go
    - workspace_mode.go
  - cmd.go
  - config.go
  - docs.go
  - generatedocs.go
  - ide.go
  - logs.go
  - purge.go
  - version.go
  - whoami.go
- common
  - error.go
  - get_daytona_script.go
  - get_daytona_script_test.go
- containerregistry
  - container_registry.go
  - store.go
- db
  - dto
  - api_key_store.go
  - build_store.go
  - connection.go
  - container_registry_store.go
  - error.go
  - gitprovider_config_store.go
  - profile_data_store.go
  - project_config_store.go
  - provider_target_store.go
  - workspace_store.go
- docker
  - README.md
  - client.go
  - client_test.go
  - container_logs.go
  - container_logs_test.go
  - create.go
  - create_devcontainer.go
  - create_image.go
  - create_test.go
  - delete_image.go
  - destroy.go
  - destroy_test.go
  - exec.go
  - exec_test.go
  - info.go
  - info_test.go
  - pull_image.go
  - push_image.go
  - start.go
  - start_devcontainer.go
  - start_image.go
  - start_test.go
  - stop.go
  - stop_test.go
- frpc
  - frpc.go
- git
  - add.go
  - branch.go
  - clone.go
  - commit.go
  - config.go
  - log.go
  - pull.go
  - push.go
  - service.go
  - service_test.go
  - status.go
  - types.go
- gitprovider
  - gitnessclient
    - gitness_client.go
    - gitness_types.go
  - aws-codecommit.go
  - aws-codecommit_test.go
  - azure-devops.go
  - azure-devops_test.go
  - bitbucket.go
  - bitbucket_test.go
  - bitbucketserver.go
  - bitbucketserver_test.go
  - git_provider.go
  - git_provider_test.go
  - gitea.go
  - gitea_test.go
  - gitee.go
  - gitee_test.go
  - github.go
  - github_test.go
  - gitlab.go
  - gitlab_test.go
  - gitness.go
  - gitness_test.go
  - gogs.go
  - gogs_test.go
  - store.go
  - types.go
- ide
  - browser.go
  - cursor.go
  - fleet.go
  - jetbrains.go
  - jupyter.go
  - terminal.go
  - vscode.go
  - zed.go
- logs
  - build.go
  - logger.go
  - project.go
  - workspace.go
- os
  - chmod.go
  - download.go
  - os.go
- ports
  - ports.go
- posthogservice
  - service.go
- profiledata
  - profile_data.go
  - store.go
- provider
  - manager
  - util
    - project_start_script.go
    - types.go
  - provider.go
  - rpc_client.go
  - rpc_server.go
  - store.go
  - types.go
- provisioner
  - create.go
  - destroy.go
  - info.go
  - provisioner.go
  - start.go
  - stop.go
- sample
  - sample.go
- scheduler
  - scheduler.go
- server
  - apikeys
    - apikeys.go
    - apikeys_test.go
    - service.go
    - service_test.go
    - validate.go
    - validate_test.go
  - builds
    - dto
      - builds.go
    - service.go
    - service_test.go
  - containerregistries
    - service.go
    - service_test.go
  - gitproviders
    - dto
      - gitproviders.go
    - branches.go
    - config.go
    - gitprovider.go
    - namespaces.go
    - prebuild_webhook.go
    - pull_requests.go
    - remove.go
    - repositories.go
    - service.go
    - user.go
  - headscale
    - auth_keys.go
    - client.go
    - config.go
    - connect.go
    - create_user.go
    - server.go
  - profiledata
    - service.go
    - service_test.go
  - projectconfig
    - dto
      - projectconfig.go
    - prebuild.go
    - prebuild_test.go
    - service.go
    - service_test.go
  - providertargets
    - dto
      - providertargets.go
    - service.go
    - service_test.go
  - registry
    - service.go
  - workspaces
    - dto
      - workspace.go
    - create.go
    - error.go
    - get.go
    - list.go
    - remove.go
    - service.go
    - service_test.go
    - start.go
    - stop.go
  - config.go
  - defaults.go
  - downloads.go
  - error.go
  - log.go
  - providers.go
  - purge.go
  - samples.go
  - server.go
  - types.go
- ssh
  - client.go
  - env.go
  - exec.go
  - read_file.go
  - user.go
  - write_file.go
- tailscale
  - tunnel
  - connection.go
  - forward_unix.go
  - ssh_client.go
- telemetry
  - build_runner_events.go
  - cli_events.go
  - constants.go
  - server_events.go
  - telemetry.go
- views
  - apikey
    - create.go
    - list.go
    - notify.go
    - select.go
    - view.go
  - build
    - info
      - view.go
    - list
      - view.go
  - config
    - view.go
  - containerregistry
    - list
      - view.go
    - select.go
    - set.go
    - view.go
  - env
    - list.go
  - gitprovider
    - info
      - view.go
    - list
      - view.go
    - select.go
    - types.go
  - ide
    - code.go
    - select.go
    - start_workspace.go
    - view.go
  - initial
    - view.go
  - logs
    - display.go
  - prebuild
    - add
      - add.go
    - info
      - view.go
    - list
      - view.go
  - profile
    - create.go
    - info.go
    - list.go
    - select.go
    - switch_to_default.go
    - view.go
  - projectconfig
    - info
      - view.go
    - list
      - view.go
  - provider
    - list.go
    - select.go
    - view.go
  - purge
    - confirm.go
    - default_profile_notice.go
    - server_stopped.go
  - server
    - selection
      - logs.go
      - view.go
    - started
      - view.go
    - config.go
    - configure.go
    - confirm_daemon.go
    - list_logs.go
  - target
    - list
      - view.go
    - select.go
    - set.go
    - view.go
  - util
    - build_choice.go
    - empty_list.go
    - help.go
    - spinner.go
    - table.go
    - text_wrapper.go
  - whoami
    - view.go
  - workspace
    - create
    - info
      - view.go
    - list
      - view.go
    - selection
  - common.go
  - styles.go
- workspace
  - project
    - buildconfig
      - config.go
    - config
    - containerconfig
      - config.go
    - project.go
  - store.go
  - workspace.go
.gitattributes
.gitignore
.golangci.yaml
.licenserc.yaml
CODE_OF_CONDUCT.md
CONTRIBUTING.md
CONTRIBUTORS.md
COPYRIGHT
LICENSE
Makefile
NOTICE
PACKAGING.md
PREPARING_YOUR_CHANGES.md
README.md
SECURITY.md
go.mod
go.sum
openapitools.json

Security

Daytona prioritizes security in development environments. ^1

Reporting a Vulnerability

To report a vulnerability, please contact us at ^1

Top-Level Directory Explanations

assets/ - Directory for storing static files such as images, stylesheets, and scripts.

assets/images/ - Subdirectory for storing project images.

hack/ - Directory for Go development, including build scripts and dependencies.

internal/ - Private package directory for the project’s internal modules.

internal/apikeys/ - Subdirectory for managing API keys.

internal/util/ - Subdirectory for utility modules.

pkg/ - Go packages directory.

pkg/agent/ - Subdirectory for the project’s agent package.

pkg/agent/ssh/ - Subdirectory for SSH-related configurations and utilities.

pkg/agent/tailscale/ - Subdirectory for Tailscale-related configurations and utilities.

pkg/api/ - Subdirectory for API-related packages.

pkg/api/controllers/ - Subdirectory for API controller handlers.

pkg/api/middlewares/ - Subdirectory for API middlewares.

pkg/cmd/ - Subdirectory for command-line interface tools.

pkg/cmd/agent/ - Subdirectory for agent command-line tools.

pkg/cmd/apikey/ - Subdirectory for API key command-line tools.

pkg/cmd/profile/ - Subdirectory for profile command-line tools.

pkg/cmd/profiledata/ - Subdirectory for profiledata command-line tools.

pkg/cmd/server/ - Subdirectory for server command-line tools.

pkg/cmd/telemetry/ - Subdirectory for telemetry command-line tools.

pkg/cmd/workspacemode/ - Subdirectory for workspace mode command-line tools.

pkg/common/ - Subdirectory for common packages and utilities.

pkg/db/ - Subdirectory for database-related packages and scripts.

pkg/docker/ - Subdirectory for Docker-related packages and scripts.

pkg/frpc/ - Subdirectory for Fanout Reverse Proxy (frpc) package.

pkg/gitprovider/ - Subdirectory for Git provider package.

pkg/os/ - Subdirectory for operating system-related packages and scripts.

pkg/posthogservice/ - Subdirectory for PostHog service package.

pkg/profiledata/ - Subdirectory for profiledata package.

pkg/server/ - Subdirectory for server-related packages and scripts.

pkg/server/gitproviders/ - Subdirectory for Git providers server-side.

pkg/server/headscale/ - Subdirectory for Headscale server-side.

pkg/server/profiledata/ - Subdirectory for profiledata server-side.

pkg/server/registry/ - Subdirectory for registry server-side.

pkg/ssh/ - Subdirectory for SSH-related packages and scripts.

pkg/tailscale/ - Subdirectory for Tailscale package.

pkg/tailscale/tunnel/ - Subdirectory for Tailscale tunnel.

pkg/telemetry/ - Subdirectory for telemetry-related packages and scripts.

pkg/views/ - Subdirectory for view templates.

pkg/views/env/ - Subdirectory for environment variable view templates.

pkg/views/gitprovider/ - Subdirectory for Git provider view templates.

Security

Reporting a Vulnerability

Top-Level Directory Explanations

Explanation

Graph

Symbols

We couldn't identify any entrypoints. If you believe this to be incorrect then please contact support.