kestra-io / kestra-io/plugin-graalvm
Restrict file system acces
Open
area/plugin
good first issue
- Dominant language
- Java
- Stars
- 0
- Forks
- 1
- Avg merge
- 5h 23m
- Merged PRs (30d)
- 4
Description
### Feature description
It is possible to restrict file system access via:
```java
context.allowIO(IOAccess.builder.fileSystem();
```
With a custom FileSystem implementation which do the restriction.
We should leverage that to limit access to files from the task working directory.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by locating the GraalVM context setup and reviewing the IOAccess.builder.fileSystem() API and custom FileSystem mechanism. Define the task working directory boundary, then verify that file access outside it is rejected while permitted task files remain accessible.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- backend, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100