Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-04-21 13:37:30 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 91

Add Slack update policy for macOS and Windows workstations (#41687)

Browse source 
## Summary

- Adds new Fleet policies (`update-slack.yml`) for macOS and Windows
that **fail** if a device has an outdated version of Slack installed
(below `4.48.100`).
- Follows the existing `update-*` policy pattern used by 1Password,
Claude, and Firefox.
- Registers both policies in `workstations.yml` under the appropriate OS
sections.

## Changes

| File | Description |
|---|---|
| `it-and-security/lib/macos/policies/update-slack.yml` | New macOS
policy: checks `apps` table for `Slack.app` version via
`version_compare` |
| `it-and-security/lib/windows/policies/update-slack.yml` | New Windows
policy: checks `programs` table for `Slack` version via
`version_compare` |
| `it-and-security/fleets/workstations.yml` | Adds both policy paths to
the workstations fleet |

## Policy behavior

The policy **passes** if Slack is not installed OR if the installed
version is >= `4.48.100`. The policy **fails** if Slack is installed but
at a version older than `4.48.100`.

---

Built for [Allen
Houchins](https://fleetdm.slack.com/archives/D0AFASNBZMW/p1773436302175049)
by [Kilo for Slack](https://kilo.ai/features/slack-integration)

Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>
This commit is contained in:
kilo-code-bot[bot] 2026-03-13 16:19:38 -05:00 committed by GitHub
parent ea6c720615
commit 796663a83c
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 14 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
it-and-security/fleets/workstations.yml
View file

@ -135,6 +135,7 @@ policies:
- path: ../lib/macos/policies/install-macos-compatibility-extension.yml
- path: ../lib/macos/policies/install-nudge.yml
- path: ../lib/macos/policies/update-claude.yml
- path: ../lib/macos/policies/update-slack.yml
# Windows policies
- path: ../lib/windows/policies/antivirus-signatures-up-to-date.yml
- path: ../lib/windows/policies/all-windows-updates-installed.yml
@ -143,6 +144,7 @@ policies:
- path: ../lib/windows/policies/1password-installed.yml
- path: ../lib/windows/policies/update-1password.yml
- path: ../lib/windows/policies/update-claude.yml
- path: ../lib/windows/policies/update-slack.yml
- path: ../lib/windows/policies/windows-defender-compliance-check.yml
# Linux policies
- path: ../lib/linux/policies/disk-encryption-check.yml

6
it-and-security/lib/macos/policies/update-slack.yml Normal file
View file

@ -0,0 +1,6 @@
- name: macOS - Slack up to date
query: SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE name = 'Slack.app' AND version_compare(bundle_short_version, '4.48.100') < 0);
critical: false
description: The host may have an outdated version of Slack, potentially risking security vulnerabilities or compatibility issues.
resolution: "Download the latest version from Self-service or check for updates using Slack's built-in update functionality. You can also delete Slack if you are no longer using it."
platform: darwin

6
it-and-security/lib/windows/policies/update-slack.yml Normal file
View file

@ -0,0 +1,6 @@
- name: Windows - Slack up to date
query: SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM programs WHERE name = 'Slack' AND version_compare(version, '4.48.100') < 0);
critical: false
description: The host may have an outdated version of Slack, potentially risking security vulnerabilities or compatibility issues.
resolution: "Download the latest version from Self-service or check for updates using Slack's built-in update functionality. You can also uninstall Slack if you are no longer using it."
platform: windows