Nomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.
490 matches across 10 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | demo/csi/ceph-csi-plugin/ceph-csi-id.tf | 1 | # Copyright IBM Corp. 2015, 2026 |
| LOW | ui/app/routes/administration/policies/new.js | 61 | # * read-job |
| LOW | ui/tests/helpers/index.ts | 21 | // |
| LOW | enos/enos-scenario-upgrade.hcl | 161 | |
| LOW | drivers/docker/config.go | 161 | // and is used to parse the contents of the 'plugin "docker" {...}' block. |
| LOW | drivers/docker/win32_volume_parse.go | 21 | // myname:d: |
| LOW | drivers/docker/win32_volume_parse.go | 41 | |
| LOW | drivers/docker/driver.go | 941 | // |
| LOW | drivers/docker/driver_test.go | 141 | |
| LOW | drivers/shared/capabilities/defaults.go | 21 | extractLiteral = regexp.MustCompile(`([\w]+)`) |
| LOW | drivers/shared/capabilities/defaults.go | 121 | // |
| LOW | drivers/shared/executor/utils.go | 161 | const ( |
| LOW | drivers/shared/executor/executor.go | 61 | // Launch a user process configured by the given ExecCommand |
| LOW | drivers/shared/executor/executor.go | 201 | // Critical: is "/reserve/<id>" or "/share"; do not try to parse this! |
| LOW | drivers/shared/executor/executor_universal_linux.go | 81 | // its use case is for removing the cgroup from the system once it is no longer |
| LOW | drivers/shared/executor/procstats/procstats.go | 81 | Pids: procStats, |
| LOW | drivers/qemu/driver.go | 581 | |
| LOW | plugins/csi/client.go | 41 | // According to CSI, there are a few requirements for the keys within this map: |
| LOW | plugins/csi/plugin.go | 81 | NodeGetCapabilities(ctx context.Context) (*NodeCapabilitySet, error) |
| LOW | plugins/csi/plugin.go | 121 | // If the volume was attached via a call to `ControllerPublishVolume` then |
| LOW | plugins/csi/plugin.go | 201 | // The path to which the volume MAY be staged. It MUST be an |
| LOW | plugins/drivers/driver.go | 601 | |
| LOW | plugins/shared/hclspec/hcl_spec.pb.go | 1 | // Code generated by protoc-gen-go. DO NOT EDIT. |
| LOW | plugins/shared/hclspec/hcl_spec.pb.go | 21 | // `min(numbers...)` returns the smallest of the given numbers. |
| LOW | plugins/shared/hclspec/hcl_spec.pb.go | 41 | // `number` is an arbitrary-precision floating point number. |
| LOW | plugins/shared/hclspec/hcl_spec.pb.go | 61 | ) |
| LOW | plugins/shared/hclspec/hcl_spec.pb.go | 281 | // Attr { |
| LOW | plugins/shared/hclspec/hcl_spec.pb.go | 361 | // creates validation constraints for the given block type name. |
| LOW | plugins/shared/hclspec/hcl_spec.pb.go | 381 | // input file. This may be omitted when a default name selector is created |
| LOW | plugins/shared/hclspec/hcl_spec.pb.go | 441 | func (m *Block) GetNested() *Spec { |
| LOW | plugins/shared/hclspec/hcl_spec.pb.go | 461 | // but due to the constraints of that syntax it also means that the user will |
| LOW | plugins/shared/hclspec/hcl_spec.pb.go | 541 | // |
| LOW | plugins/shared/hclspec/hcl_spec.pb.go | 561 | // `min_items` (optional) - If set to a number greater than zero, `hcldec` will |
| LOW | plugins/shared/hclspec/hcl_spec.pb.go | 641 | // name = "log_file" |
| LOW | plugins/shared/hclspec/hcl_spec.pb.go | 721 | // result is a JSON object, or possibly multiple nested JSON objects, whose |
| LOW | plugins/shared/hclspec/hcl_spec.pb.go | 741 | // input file. This may be omitted when a default name selector is created |
| LOW | plugins/shared/hclspec/hcl_spec.pb.go | 861 | func (m *Literal) GetValue() string { |
| LOW | plugins/shared/hclspec/hcl_spec.pb.go | 881 | // } |
| LOW | plugins/shared/hclspec/hcl_spec.pb.go | 941 | // spec blocks: |
| LOW | plugins/shared/hclspec/hcl_spec.pb.go | 1001 | if m != nil { |
| LOW | ci/slow.go | 21 | // Parallel runs t in parallel, unless CI is set to a true value. |
| LOW | scheduler/annotate.go | 21 | UpdateTypeIgnore = "ignore" |
| LOW | scheduler/util.go | 921 | // Since this is an inplace update, we should copy network and port |
| LOW | scheduler/doc.go | 1 | // Copyright IBM Corp. 2015, 2026 |
| LOW | scheduler/feasible/device.go | 61 | // Matches returns whether the given device instance is on a PCI bus that is |
| LOW | scheduler/feasible/doc.go | 1 | // Copyright IBM Corp. 2015, 2026 |
| LOW | scheduler/feasible/rank.go | 441 | // deviceMemoryNode will record which NUMA memory node our devices |
| LOW | scheduler/structs/interfaces.go | 21 | |
| LOW | scheduler/structs/interfaces.go | 121 | |
| LOW | scheduler/structs/doc.go | 1 | // Copyright IBM Corp. 2015, 2026 |
| LOW | scheduler/benchmarks/benchmarks_test.go | 21 | // benchmark for the Nomad scheduler. The starting state for your |
| LOW | scheduler/reconciler/reconcile_cluster.go | 81 | // clusterState stores frequently accessed properties of the cluster: |
| LOW | scheduler/reconciler/reconcile_cluster.go | 1261 | // reconnect, which ones to stop, and the stop results for the latter. |
| LOW | scheduler/reconciler/filters.go | 21 | markStop(migrate, "", sstructs.StatusAllocNotNeeded), |
| LOW | scheduler/reconciler/filters.go | 421 | } |
| LOW | jobspec2/hcl_conversions.go | 361 | t.Env = envAttr |
| LOW | jobspec2/hcl_conversions.go | 381 | // } |
| LOW | jobspec2/types.variables.go | 41 | Expr hcl.Expression |
| LOW | jobspec2/types.variables.go | 361 | |
| LOW | jobspec2/addrs/referenceable.go | 1 | // Copyright IBM Corp. 2015, 2026 |
| 354 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| CRITICAL | …integration/components/das/recommendation-card-test.js | 159 | RecommendationCard.activeTask.totalsTable.recommended.cpu.as( |
| CRITICAL | …integration/components/das/recommendation-card-test.js | 166 | RecommendationCard.activeTask.totalsTable.recommended.memory.as( |
| CRITICAL | …integration/components/das/recommendation-card-test.js | 210 | RecommendationCard.activeTask.totalsTable.recommended.cpu.as( |
| CRITICAL | scheduler/util.go | 681 | Networks: update.Alloc.AllocatedResources.Shared.Networks.Copy(), |
| CRITICAL | scheduler/feasible/rank.go | 475 | nodeCores := option.Node.NodeResources.Processors.Topology.UsableCores() |
| CRITICAL | scheduler/feasible/rank.go | 569 | availableCores: option.Node.NodeResources.Processors.Topology.UsableCores(), |
| CRITICAL | scheduler/feasible/rank.go | 681 | nodeCores := option.Node.NodeResources.Processors.Topology.UsableCores() |
| CRITICAL | client/allocrunner/taskrunner/task_runner.go | 1233 | PercentTicks: float64(taskResources.Cpu.CpuShares) / float64(tr.clientConfig.Node.NodeResources.Processors.Topol |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | nomad/node_endpoint.go | 636 | // ┌────────────────────────────────────── No ───┐ |
| MEDIUM | nomad/node_endpoint.go | 638 | // ┌──▼───┐ ┌─────────────┐ ┌────────┴────────┐ |
| MEDIUM | nomad/node_endpoint.go | 640 | // └──▲──▲┘ └─────┬───────┘ └────────┬────────┘ |
| MEDIUM | nomad/node_endpoint.go | 642 | // │ │ └─ No ─┐ ┌─────── Yes ──┘ |
| MEDIUM | nomad/node_endpoint.go | 644 | // │ │ ┌────────▼──▼───────┐ |
| MEDIUM | nomad/node_endpoint.go | 645 | // │ └──────────No───┤ Node pool exists? │ |
| MEDIUM | nomad/node_endpoint.go | 646 | // │ └─────────┬─────────┘ |
| MEDIUM | nomad/node_endpoint.go | 650 | // ┌──────┴───────┐ ┌───▼───┐ ┌──────┐ |
| MEDIUM | nomad/node_endpoint.go | 652 | // └──────────────┘ └───▲───┘ └──┬───┘ |
| MEDIUM | nomad/node_endpoint.go | 654 | // └──── ready ─────┘ |
| MEDIUM | e2e/terraform/variables.tf | 50 | # ---------------------------------------- |
| MEDIUM | e2e/terraform/variables.tf | 103 | # ---------------------------------------- |
| MEDIUM | e2e/terraform/provision-infra/variables.tf | 50 | # ---------------------------------------- |
| MEDIUM | e2e/terraform/provision-infra/variables.tf | 106 | # ---------------------------------------- |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | ui/app/utils/qp-serialize.js | 8 | // An unattractive but robust way to encode query params |
| MEDIUM | ui/app/controllers/jobs/index.js | 110 | // overwrite this controller's jobIDs, leverage its index, and |
| MEDIUM | ui/mirage/config.js | 595 | // Use the server instead of the schema to leverage the job factory |
| MEDIUM | ui/mirage/config.js | 610 | // Use the server instead of the schema to leverage the job factory |
| MEDIUM | drivers/docker/win32_volume_parse.go | 49 | // - Essentially using the folder solution from |
| MEDIUM | nomad/job_endpoint_hooks.go | 68 | // groups that utilize Nomad's native service discovery checks feature. This |
| MEDIUM | nomad/job_endpoint_hooks.go | 79 | // utilize Nomad's NUMA aware scheduling which requires Nomad 1.7 or later. |
| MEDIUM | nomad/job_endpoint_hooks.go | 86 | // numaKernelConstraint is the constraint injected into task groups that utilize |
| MEDIUM | nomad/consul.go | 35 | // the Consul scope. There was a Meta field introduced which Nomad can leverage |
| MEDIUM | api/internal/testutil/discover/discover.go | 70 | // delve debug executable for debugging test |
| MEDIUM | command/deployment_status.go | 393 | // TODO We may want to find a more robust way of waiting for rollbacks to launch instead of |
| MEDIUM | command/deployment_status.go | 502 | // TODO We may want to find a more robust way of waiting for rollbacks to launch instead of |
| MEDIUM | command/agent/agent.go | 1384 | // running consul-template functions that utilize the Nomad API. We lazy |
| MEDIUM | …nt/allocrunner/taskrunner/template/template_default.go | 152 | // stderr the same way CT does so the results look seamless |
| MEDIUM | client/hostvolumemanager/host_volumes.go | 346 | // dynamic volumes, like CSI, have more robust `capabilities`, |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | …app/utils/sentinel_policy_templates/restrict-images.js | 37 | print(task.config.image, "in task", task.name, "does not conform to policy, not in allowed images", allowed_im |
| HIGH | …app/utils/sentinel_policy_templates/restrict-images.js | 46 | print(task.config.image, "in task", task.name, "does not conform to policy, using :latest instead of a specifi |
| HIGH | …app/utils/sentinel_policy_templates/restrict-images.js | 51 | print(task.config.image, "in task", task.name, "does not conform to policy, not from an allowed registry", allow |
| HIGH | ui/mirage/scenarios/default.js | 712 | print("volume is missing tag") |
| HIGH | ui/mirage/scenarios/default.js | 729 | print("volume is missing tag") |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | demo/csi/digitalocean/.terraform.lock.hcl | 1 | # This file is maintained automatically by "terraform init". |
| MEDIUM | ui/app/utils/default_jobs/variables.js | 52 | # Create a template resource that will be used to render the html file |
| MEDIUM | drivers/docker/test-resources/docker/gen_stopsignal.sh | 6 | # Create the tarball used in TestDockerDriver_StopSignal |
| MEDIUM | .github/actions/jira/transition/jira-transition.bash | 45 | # Create the initial payload. This will be updated as needed prior |
| MEDIUM | …ithub/actions/jira/sync-comment/jira-sync-comment.bash | 29 | # Create the comment |
| MEDIUM | .github/actions/jira/create/jira-create.bash | 64 | # Create the issue |
| MEDIUM | command/quota_init.go | 117 | # Create a limit for the global region. Additional limits may |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | ui/app/utils/rollback-without-changed-attrs.js | 6 | export default function rollbackWithoutChangedAttrs(model) { |
| LOW | ui/app/abilities/client.js | 41 | function policiesIncludePermissions(policies = [], permissions = []) { |
| LOW | ui/app/adapters/watchable.js | 442 | function hasNonBlockingQueryParams(options) { |
| LOW | ui/app/adapters/watchable.js | 457 | function shouldPreAdvanceWatchIndex() { |
| LOW | ui/app/helpers/format-scheduled-hertz.js | 17 | function formatScheduledHertzHelper([hertz], { start }) { |
| LOW | ui/app/helpers/format-scheduled-bytes.js | 17 | function formatScheduledBytesHelper([bytes], { start }) { |
| LOW | ui/tests/utils/ember-power-select-extensions.js | 17 | async function openIfClosedAndGetContentId(trigger) { |
| LOW | ui/tests/acceptance/optimize-test.js | 22 | function getLatestRecommendationSubmitTimeForJob(job) { |
| LOW | ui/tests/acceptance/job-deployments-test.js | 313 | function promotionTestForTaskGroup(taskGroup) { |
| LOW | ui/tests/helpers/module-for-job.js | 272 | export function moduleForJobWithClientStatus( |
| LOW | ui/tests/helpers/glimmer-factory.js | 25 | export default function setupGlimmerComponentFactory(hooks, componentKey) { |
| LOW | ui/tests/helpers/glimmer-factory.js | 39 | function glimmerComponentInstantiator(owner, componentKey) { |
| LOW | ui/tests/helpers/setup-authenticated-acceptance.js | 6 | export default function setupAuthenticatedAcceptance( |
| LOW | ui/mirage/factories/evaluation.js | 140 | export function generateTaskGroupFailures() { |
| LOW | ui/mirage/scenarios/default.js | 1260 | function getScenarioQueryParameter() { |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | client/allocrunner/alloc_runner_test.go | 1850 | // Step 1: start and run a task |
| LOW | client/allocrunner/taskrunner/plugin_supervisor_hook.go | 297 | // Step 1: Wait for the plugin to initially become available. |
| LOW | client/allocrunner/taskrunner/plugin_supervisor_hook.go | 327 | // Step 2: Register the plugin with the catalog. |
| LOW | client/allocrunner/taskrunner/plugin_supervisor_hook.go | 336 | // Step 3: Start the lightweight supervisor loop. At this point, |
| LOW | client/pluginmanager/csimanager/volume_test.go | 82 | // Step 1: Validate that the test case makes sense |
| LOW | client/pluginmanager/csimanager/volume_test.go | 94 | // Step 2: Test Setup |
| LOW | client/pluginmanager/csimanager/volume_test.go | 109 | // Step 3: Now we can do some testing |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | scripts/example_weave.bash | 81 | # Script checks are run from inside the container, so you can use |
| MEDIUM | e2e/terraform/variables.tf | 104 | # If you want to deploy different versions you can use these variables to |
| MEDIUM | e2e/terraform/provision-infra/variables.tf | 107 | # If you want to deploy different versions you can use these variables to |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | contributing/CHANGELOG.md | 85 | main: Lorem ipsum dolor `sit amet`, _consectetur_ adipiscing elit, **sed** do |
| LOW | client/allocrunner/taskrunner/getter/sandbox_test.go | 935 | cmd = exec.Command("git", "config", "user.email", "user@example.com") |