From e1333c113f36a925198b9ada35ca8910f71ce752 Mon Sep 17 00:00:00 2001 From: Lucas Manuel Rodriguez Date: Fri, 29 Sep 2023 12:21:28 -0700 Subject: [PATCH] [Hackathon] Add query to list VSCode extensions for macOS (#14213) Co-authored-by: Sharon Katz <121527325+sharon-fdm@users.noreply.github.com> --- .../standard-query-library.yml | 22 +++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/docs/01-Using-Fleet/standard-query-library/standard-query-library.yml b/docs/01-Using-Fleet/standard-query-library/standard-query-library.yml index b06e54ffe5..d1f40911a6 100644 --- a/docs/01-Using-Fleet/standard-query-library/standard-query-library.yml +++ b/docs/01-Using-Fleet/standard-query-library/standard-query-library.yml @@ -1045,3 +1045,25 @@ spec: purpose: Informational tags: crowdstrike, plist, network, content filter contributors: zwass +--- +apiVersion: v1 +kind: query +spec: + name: Get a list of Visual Studio Code extensions + platform: darwin + description: Get a list of installed VS Code extensions. + query: | + SELECT split(user_path, '/', 1) as username, + json_extract(value, '$.identifier.id') as id, + json_extract(value, '$.identifier.uuid') as uuid, + json_extract(value, '$.location.path') as path, + json_extract(value, '$.version') as version, + json_extract(value, '$.metadata.publisherDisplayName') as publisher_display_name + FROM ( + SELECT file_lines.path as user_path, value + FROM file_lines, json_each(line) + WHERE file_lines.path LIKE '/Users/%/.vscode/extensions/extensions.json' + ); + purpose: Informational + tags: inventory + contributors: lucasmrod,sharon-fdm,zwass \ No newline at end of file