Commit graph

191 commits

Author SHA1 Message Date
eashaw
666509e634
Ignore FleetDM GitHub project URLs when checking Markdown links (#4712)
* Add GitHub projects to link check ignorePatterns

* update pattern to exclude private GitHub projects
2022-03-21 17:21:12 -05:00
Zach Wasserman
cc687d9d1e
Add Notarization for Fleet Desktop (#4720) 2022-03-21 15:01:50 -07:00
Guillaume Ross
d60ee47545
Securing desktop github workflow (#4718)
Pinning the dependencies and putting an explicit read only permission on the new desktop github workflow
2022-03-21 15:38:21 -04:00
Lucas Manuel Rodriguez
ecdfd627b6
Fleet Desktop MVP (#4530)
* WIP

* WIP2

* Fix orbit and fleetctl tests

* Amend macos-app default

* Add some fixes

* Use fleetctl updates roots command

* Add more fixes to Updater

* Fixes to app publishing and downloading

* Add more changes to support fleetctl cross generation

* Amend comment

* Add pkg generation to ease testing

* Make more fixes

* Add changes entry

* Add legacy targets (until our TUF system exposes the new app)

* Fix fleetctl preview

* Fix bool flag

* Fix orbit logic for disabled-updates and dev-mode

* Fix TestPreview

* Remove constant and fix zip-slip attack (codeql)

* Return unknown error

* Fix updater's checkExec

* Add support for executable signing in init_tuf.sh

* Try only signing orbit

* Fix init_tuf.sh targets, macos-app only for osqueryd

* Specify GOARCH to support M1s

* Add workflow to generate osqueryd.app.tar.gz

* Use 5.2.2 on init_tuf.sh

* Add unit test for tar.gz target

* Use artifacts instead of releases

* Remove copy paste residue

* Fleet Desktop Packaging WIP

* Ignore gosec warning

* Trigger on PR too

* Install Go in workflow

* Pass url parameter to desktop app

* Fix fleetctl package

* Final set of changes for v1 of Fleet Desktop

* Add changes

* PR fixes

* Fix CI build

* add larger menu bar icon

* Add transparency item

* Delete host_device_auth entry on host deletion

* Add SetTargetChannel

* Update white logo and add desktop to update runner

* Add fleet-desktop monitoring to orbit

* Define fleet-desktop app exec name

* Fix update runner creation

* Add API test before enabling the My device menu item

Co-authored-by: Zach Wasserman <zach@fleetdm.com>
2022-03-21 14:53:53 -03:00
Guillaume Ross
befbe88eb8
Adding manual execution to ossf scorecard workflow 2022-03-18 14:36:10 -04:00
Guillaume Ross
32ad77c22e
Create dependabot.yml (#4558)
Part of #4198
2022-03-16 16:00:22 -04:00
Guillaume Ross
62d3b9145f
4620 pin action dependencies (#4622)
* Update build-binaries.yaml

Pin action versions + add read only token to build-binaries.yaml

* Update codeql-analysis.yml

Pin dependencies with hash for codeql-analysis.yml

* Update deploy-fleet-website.yml

Pin dependencies in deploy-fleet-website.yml

* Update docs.yml

Pin dependencies for docs.yml

* Update fleet-and-orbit.yml

Pinning dependencies for fleet-and-orbit.yml

* Update generate-osqueryd-app-tar-gz.yml

Pin dependencies for generate-osqueryd-app-tar-gz.yml

* Pin dependencies in goreleaser workflows

Pinned dependencies in the 3 goreleaser workflows

* Update integration.yml

Pinned dependencies with hash

* Update pr-helm.yaml

Pinned dependencies with hash

* Update push-osquery-perf-to-ecr.yml

Pinned dependencies with a hash

* Update release-helm.yaml

Pinned one dependency with a hash

* Update semgrep-analysis.yml

Pinned dependencies with hashes

* Update test-go.yaml

Pinned dependencies with hash

* Update test-packaging.yml

Pinned dependencies with hashes

* Update test-website.yml

Pinned dependencies with hashes

* Update test.yml

Pinned dependencies with hashes
2022-03-16 15:42:28 -04:00
Guillaume Ross
8700fc6498
Go 1.17.8 (#4560)
* Go 1.17.8

* Enforcing go minimum 1.17.8

Bumping minimum version in a few more files
2022-03-16 14:56:58 -04:00
Lucas Manuel Rodriguez
f4d3159cc9
Fleetctl to package .app bundles for osquery (and changes for orbit to support them) (#4393)
* WIP

* WIP2

* Fix orbit and fleetctl tests

* Amend macos-app default

* Add some fixes

* Use fleetctl updates roots command

* Add more fixes to Updater

* Fixes to app publishing and downloading

* Add more changes to support fleetctl cross generation

* Amend comment

* Add pkg generation to ease testing

* Make more fixes

* Add changes entry

* Add legacy targets (until our TUF system exposes the new app)

* Fix fleetctl preview

* Fix bool flag

* Fix orbit logic for disabled-updates and dev-mode

* Fix TestPreview

* Remove constant and fix zip-slip attack (codeql)

* Return unknown error

* Fix updater's checkExec

* Add support for executable signing in init_tuf.sh

* Try only signing orbit

* Fix init_tuf.sh targets, macos-app only for osqueryd

* Specify GOARCH to support M1s

* Add workflow to generate osqueryd.app.tar.gz

* Use 5.2.2 on init_tuf.sh

* Add unit test for tar.gz target

* Use artifacts instead of releases

* Remove copy paste residue

* Trigger workflow on PR

* Fixes to ease handling of artifact

* Fix, do not use target name as dir

* Remove workaround
2022-03-15 16:04:12 -03:00
Guillaume Ross
b620d2b7d8
Fix code scanning issues with golangci-lint.yml (#4606)
Making permissions more restricted to reduce impact if token leaked, and pinning dependencies more strictly.
2022-03-15 14:44:30 -04:00
Mike McNeil
f77bdb931f
Bug issue template: i delete these every time (#4525) 2022-03-10 18:14:18 -06:00
timmy-k
cac036bf6b
Fixed broken link to debugging performance issues (#4553)
Lived under "if this is a performance issue"
2022-03-10 18:10:43 -06:00
Lucas Manuel Rodriguez
29bd76f60d
Add manual dispatch to golangci-lint.yml (#4440) 2022-03-03 17:15:17 -03:00
Martin Angers
468b67c0e0
Add PR template checkbox (#4335) 2022-02-23 14:07:38 -05:00
eashaw
0af5e161d0
Remove numbers from documentation filenames in Fleet repo (#4313)
* Renaming files and a lot of find and replace

* pageRank meta tags, sorting by page rank

* reranking

* removing numbers

* revert changing links that are locked to a commit

* update metatag name, uncomment github contributers

* Update basic-documentation.page.js

* revert link change

* more explicit errors, change pageOrderInSection numbers, updated sort

* Update build-static-content.js

* update comment

* update handbook link

* handbook entry

* update sort

* update changelog doc links to use fleetdm.com

* move standard query library back to old location, update links/references to location

* revert unintentional link changes

* Update handbook/community.md

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2022-02-23 12:17:55 -06:00
Lucas Manuel Rodriguez
b5be858071
Fix update checks for orbit at startup (#3835)
* Fix update checks for orbit at startup

* Add tests

* Add scripts for testing local TUF server

* Remove -x used for debugging
2022-02-23 14:58:07 -03:00
Guillaume Ross
0ac0c9de3e
Update scorecards-analysis.yml (#4322)
Update scorecard analysis version from 1.0.2 to 1.0.4 - has updates on how env variables are handled, need to update and see if it fixes the issue we have with the cron job.
2022-02-22 20:00:41 -05:00
Lucas Manuel Rodriguez
e39ba93a90
Orbit to wait for osqueryd extension manager socket to be ready (#3836)
* Wait for osquery extension manager socket to be ready

* PR review feedback

* Add WIP Github Action to test orbit

* Set fleet address on fleetctl

* Add logging for troubleshooting

* Add prepare db statement

* Use tls-skip-verify on fleetctl

* Move steps around

* Fix addresses

* Fix fleetctl path

* Add certs.pem to orbit root dir

* Add orbit logs

* Increase timeout

* Add proper orbit log paths

* Fix tmp path orbit

* Add get hosts command to troubleshoot

* Fix orbit job termination

* Add comments to workflows

* Wait for server to go down

* Add orbit Windows job

* Use bash on windws-latest

* Fix missing quote

* Run orbit on Ubuntu

* Bump host count

* Increase timeout for extensions and not terminate on err

* Add comment to clarify high timeout value

* Revert change, we do want to exit in case of err
2022-02-22 15:05:32 -03:00
Lucas Manuel Rodriguez
d8b8794d51
Fix setting of envs for schedule (#4205)
* Attempt to fix setting of env for schedule

* Revert logic after testing
2022-02-15 09:26:28 -03:00
Lucas Manuel Rodriguez
297dd245ec
Run go tests with -race at night (#4090)
* Run go tests with race at night

* Add missing run on step

* Fix boolean logic

* Allow manual run for test-go.yaml

* Add slack notification step

* Try global environment variable for cron schedule

* Fix indentation

* Try number 2

* Try setting cron as usual

* Remove global env

* Only send notification in case of failure when running schedule

* Run with race enable to test

* Add more fixes

* Fix github event variable name

* Set timeouts

* Fix slack notification link

* Re-enable if clause

* Last try on Github Actions

* Re-enable the if clause
2022-02-14 16:38:53 -03:00
Lucas Manuel Rodriguez
0ed0c4e27f
Allow manual dispatch of test-go.yml (#4160) 2022-02-14 12:13:02 -03:00
Noah Talerman
67827474c2
Prepare for Fleet 4.10.0 (#4161)
Co-authored-by: Zach Wasserman <zach@fleetdm.com>
2022-02-13 18:13:06 -08:00
eashaw
9af92b23aa
Update links to documentation (#4163)
* update links to documentation

* revert .sailsrc change

* fix broken link
2022-02-10 19:26:18 -06:00
Michal Nicpon
2a798575b4
Fix version command in issue template (#4030) 2022-02-07 14:54:35 -07:00
Zach Wasserman
96d81596f3
Add GitHub action for updating CA certs bundle (#4041)
See #4029
2022-02-07 09:44:31 -08:00
Mike McNeil
3f26d650a5
Disable link checking for more sites (#4000)
gusto, crunchbase, and angellist

relates to https://github.com/fleetdm/fleet/pull/3999#issuecomment-1028545628
2022-02-03 15:14:08 -06:00
Zach Wasserman
a5b2e60075
Update triggers for link check Action (#3972)
Only check on changes to .md files, nightly, and on manual trigger.

This was generating a lot of false positives in CI.
2022-02-01 18:02:37 -08:00
Guillaume Ross
05431b556a
Configuring OSSF Scorecard (#3960)
From https://github.com/ossf/scorecard-action#installation

Configuring the OSSF Scorecard on the Fleet repo and configuring it so results are sent back to dashboard and github codescanning alerts.
2022-02-01 09:31:07 -05:00
Reed Haynes
d4275a6f9a
Update smoke-tests.md (#3743)
Updating Fleet premium license keys for per release Smoke Test template.
2022-01-21 10:10:08 -06:00
Zach Wasserman
b9696f67e6
Skip link check for goreportcard.com (#3805)
It goes down relatively often, causing flaky CI.
2022-01-19 17:56:01 -08:00
Zach Wasserman
be1105757b
Simplify docker publish action (#3769) 2022-01-18 18:03:14 -08:00
Zach Wasserman
1782fc7b8f
Build Docker images on push to any branch (#3756)
Allows for testing release branches and any others.
2022-01-18 12:41:04 -08:00
Zach Wasserman
9c845ec26b
Integration test packaging (#3633) 2022-01-13 13:59:22 -08:00
Zach Wasserman
d358c703b8
Only run E2E tests on relevant commits (#3674) 2022-01-13 10:48:26 -08:00
Lucas Manuel Rodriguez
49ceee59aa
Add fixes for running tests with mysql:8 and add mysql to test-go job matrix (#3627)
* Add fixes for running tests with mysql:8

* Add getServer function

* Test github matrix

* Add changes file for the user facing fix

* Remove unused mysql8 docker-compose
2022-01-11 22:44:37 -03:00
Zach Wasserman
b56c620007
Pin actions to commit (#3566) 2022-01-04 09:30:02 -08:00
Zach Wasserman
ee96418d82
Add integration test for fleetctl preview (#3545)
Add nightly and manual job to run `fleetctl preview` and check for enrolled hosts.

Works on macOS and Linux. Windows cannot be tested on GitHub Actions due to lack of Docker Linux support.
2022-01-01 09:24:52 -08:00
Zach Wasserman
404ca8a2bc
Download artifact to build path in staging deploy (#3540) 2021-12-30 15:57:51 -08:00
Zach Wasserman
26479ccd3f
Start staging tunnel in background (#3538) 2021-12-30 15:00:36 -08:00
Zach Wasserman
e008f70e1f
Fix staging action to deploy Fleet server on PR and merge (#3531) 2021-12-30 13:23:39 -08:00
Zach Wasserman
12df9fbfce
Add Fleet server deployment in CI (#3530)
Still needs further testing as it must be merged to `main` to test it out on GitHub.
2021-12-29 20:29:18 -08:00
Zach Wasserman
ab664e5304
Clean up E2E testing configurations (#3360) 2021-12-24 12:18:00 -08:00
Zach Wasserman
46ec514ffc
Remove certificate file after import in Orbit release Action (#3416)
Otherwise, GoReleaser errors due to a dirty git tree.
2021-12-19 17:43:54 -08:00
Zach Wasserman
698ef79495
Update GitHub goreleaser configuration for Orbit (#3414) 2021-12-19 17:37:54 -08:00
Zach Wasserman
4e72ebb68f
Build Orbit releases in GitHub Actions (#3413)
Complete build including macOS signing+notarization.
2021-12-19 17:06:17 -08:00
Zach Wasserman
cad7674430
Disable fail-fast for E2E test runs (#3342)
Also update to Go 1.17+
2021-12-12 18:10:06 -08:00
Zach Wasserman
4e7a0ce88a
Upload Cypress recordings/screenshots on E2E failure (#3341) 2021-12-12 18:08:07 -08:00
Tomas Touceda
a0404b6736
Add software count API (#3105)
* Add software count API

* Fix makefile

* Fine no mock generating at this point

* Actually, one last try

* Use go install instead

* Fix go sum/mod

* Improve documentation

* Try setting node to 14
2021-12-03 10:54:17 -03:00
Zach Wasserman
850d36543d
Filter GitHub actions triggers on file types (#3009)
Reduce the total amount of Actions running by only running actions
relevant to the changes.
2021-11-18 15:14:29 -08:00
Zach Wasserman
8d4416b2d3
Update Go versions to 1.17.2 (#2805) 2021-11-04 19:50:00 -07:00