When the ProcessMaker instance calls a Script to run, the Script Executor for that programming language creates a Docker container corresponding with that programming language, runs the Script, and then destroys the Docker container. This ensures that any malicious script that anyone in your organization might inadvertently introduce to ProcessMaker does not affect the ProcessMaker instance or its hosting environment: Docker containers cannot access them. Furthermore, Docker containers cannot listen for inbound connections; therefore, a Docker container cannot be accessed externally.
When the Script Executor creates a Docker container to run a Script, required libraries are already built in that Docker container. The Script Executor for each supported programming language contains the ProcessMaker Software Development Kit (SDK) that supports extensibility to provide programmatic interaction with ProcessMaker.
Script Executors not only manage Docker containers to run Scripts. Savvy Administrators may add Docker commands and customized code to new or default Script Executors that adds custom packages that allow Scripts to call sanctioned third-party Application Program Interfaces (APIs) and SDKs. ProcessMaker designers who develop Scripts may make calls and requests to those APIs and SDKs via customized Script Executors. Since the Administrator must provide the Docker commands and configuration to a customized Script Executor, that Administrator controls access to sanctioned APIs and SDKs to those ProcessMaker designers to ensure security.
See an example in the following video how to use a Script Executor that includes a Docker
RUN command to package the Google Client class provided by Google into that Script Executor, thereby allowing Scripts using that Script Executor to successfully call the Google API.
Intended audience: Administrators, software developers, and coding engineers
Viewing time: 3 minutes; contains narration
ProcessMaker supports the following programming languages in the open-source edition:
ProcessMaker Enterprise edition supports the following additional programming languages:
C# (requires the C# package)
Java (requires the Java package)
Python (requires the Python package)
R (requires the R package)