mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-09-11 08:07:15 +00:00
Ruben FiszelandClaude Opus 4.8
6269b1e86f
The per-job-podman bind-mount escape can read world-readable host state — including world-readable /proc (process cmdlines/args via `-v /proc`), other job dirs' world-readable files, and the dep cache — but NOT 0400 files like /proc/<pid>/environ (env secrets stay protected on a root worker). Document this in the security notes (README + compose + code comment) with the corollary: don't pass secrets as command-line args (windmill uses env). Verified: uid-1000 container via `-v /proc` reading a root process's environ -> 'Permission denied'; its cmdline -> readable. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Windmill Backend
This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.
Components
| name | description |
|---|---|
| windmill-api | The API server, exposing functionality to other components and the frontend |
| windmill-audit | Contains audit functionality, allowing different components to record important actions |
| windmill-common | Common code shared by all crates |
| windmill-queue | Contains job & flow queuing functionality, commonly written to by the API server and read from by workers |
| windmill-worker | The worker. Used to process and execute flows & jobs. |
| parsers | Contains code to parse signatures in different langauges. |
Compile sqlx for offline ci
cargo sqlx prepare --workspace -- --bin windmill --features enterprise