mirror of
https://github.com/fleetdm/fleet
synced 2026-05-24 09:28:54 +00:00
227e94de5b
Some checks are pending
Build binaries / build-binaries (push) Waiting to run
Check automated documentation is up-to-date / check-doc-gen (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
Deploy Fleet website / build (20.x) (push) Waiting to run
Apply latest configuration to dogfood with GitOps / fleet-gitops (push) Waiting to run
Test latest changes in fleetctl preview / test-preview (ubuntu-latest) (push) Waiting to run
golangci-lint / lint (push) Waiting to run
golangci-lint / lint-incremental (push) Waiting to run
Docker publish / publish (push) Waiting to run
Ingest maintained apps / build (push) Waiting to run
OSSF Scorecard / Validate Gradle wrapper (push) Waiting to run
OSSF Scorecard / Scorecard analysis (push) Waiting to run
Sync Maintained Apps Outputs to R2 / sync-to-r2 (push) Waiting to run
Test DB Changes / test-db-changes (push) Waiting to run
Run fleetd-chrome tests / test-fleetd-chrome (ubuntu-latest) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, integration-mdm) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, main) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, mysql) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, service) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, vuln) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, fleetctl) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, integration-core) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, integration-enterprise) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, integration-mdm) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, main) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, mysql) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, service) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, vuln) (push) Waiting to run
Go Tests / test-go-nanomdm (push) Waiting to run
Go Tests / test-go-no-db (fast) (push) Waiting to run
Go Tests / test-go-no-db (scripts) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, fleetctl) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, fleetctl) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, integration-core) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, integration-enterprise) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, integration-mdm) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, integration-core) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, main) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, mysql) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, service) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, vuln) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, fleetctl) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, integration-core) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, integration-enterprise) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, integration-mdm) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, integration-enterprise) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, main) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, mysql) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, service) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, vuln) (push) Waiting to run
Go Tests / upload-coverage (push) Blocked by required conditions
Go Tests / aggregate-result (push) Blocked by required conditions
JavaScript Tests / test-js (ubuntu-latest) (push) Waiting to run
JavaScript Tests / lint-js (ubuntu-latest) (push) Waiting to run
Test Mock Changes / test-mock-changes (push) Waiting to run
Test native tooling packaging / test-packaging (local, ubuntu-latest) (push) Waiting to run
Test native tooling packaging / test-packaging (remote, ubuntu-latest) (push) Waiting to run
Test Puppet / test-puppet (push) Waiting to run
<!-- Add the related story/sub-task/bug number, like Resolves #123, or remove if NA --> **Related issue:** Resolves #44723 # Checklist for submitter If some of the following don't apply, delete the relevant line. - [x] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. See [Changes files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files) for more information. - [x] Input data is properly validated, `SELECT *` is avoided, SQL injection is prevented (using placeholders for values in statements), JS inline code is prevented especially for url redirects, and untrusted data interpolated into shell scripts/commands is validated against shell metacharacters. - [x] If paths of existing endpoints are modified without backwards compatibility, checked the frontend/CLI for any necessary changes ## Testing - [x] Added/updated automated tests - [x] Where appropriate, [automated tests simulate multiple hosts and test for host isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing) (updates to one hosts's records do not affect another) - [ ] QA'd all new/changed functionality manually <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Bug Fixes** * Strengthened validation of sorting/order parameters across many list and cursor-based endpoints — unsupported sort keys now return explicit errors and prevent unsafe queries. * Labels listing: label-list pagination query name changed; ordering by host_count is rejected when host counts are disabled (validated at request parsing). * **Tests** * Added/expanded tests covering allowed order keys, rejection of unknown keys, and pagination behavior for multiple listing APIs. <!-- end of auto-generated comment: release notes by coderabbit.ai --> --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: Lucas Manuel Rodriguez <lucas@fleetdm.com> |
||
|---|---|---|
| .. | ||
| migrations | ||
| rdsauth | ||
| testdata | ||
| activities.go | ||
| activities_test.go | ||
| aggregated_stats.go | ||
| aggregated_stats_test.go | ||
| android.go | ||
| android_device_test.go | ||
| android_enterprise_test.go | ||
| android_enterprises.go | ||
| android_hosts.go | ||
| android_mysql.go | ||
| android_test.go | ||
| app_configs.go | ||
| app_configs_test.go | ||
| apple_mdm.go | ||
| apple_mdm_ddm_test.go | ||
| apple_mdm_test.go | ||
| ca_config_assets.go | ||
| ca_config_assets_test.go | ||
| calendar_events.go | ||
| calendar_events_test.go | ||
| campaigns.go | ||
| campaigns_test.go | ||
| carves.go | ||
| carves_test.go | ||
| certificate_authorities.go | ||
| certificate_authorities_test.go | ||
| certificate_templates.go | ||
| certificate_templates_test.go | ||
| challenges.go | ||
| conditional_access_bypass.go | ||
| conditional_access_bypass_test.go | ||
| conditional_access_microsoft.go | ||
| conditional_access_microsoft_test.go | ||
| conditional_access_scep.go | ||
| conditional_access_scep_test.go | ||
| config.go | ||
| cron_stats.go | ||
| cron_stats_test.go | ||
| delete.go | ||
| delete_test.go | ||
| disk_encryption.go | ||
| disk_encryption_test.go | ||
| email_changes.go | ||
| email_changes_test.go | ||
| errors.go | ||
| errors_test.go | ||
| fulltext.go | ||
| fulltext_test.go | ||
| host_certificate_templates.go | ||
| host_certificate_templates_test.go | ||
| host_certificates.go | ||
| host_certificates_test.go | ||
| host_identity_scep.go | ||
| host_identity_scep_test.go | ||
| hosts.go | ||
| hosts_test.go | ||
| in_house_apps.go | ||
| in_house_apps_test.go | ||
| invites.go | ||
| invites_test.go | ||
| jobs.go | ||
| jobs_test.go | ||
| labels.go | ||
| labels_test.go | ||
| linux_mdm.go | ||
| linux_mdm_test.go | ||
| locks.go | ||
| locks_test.go | ||
| maintained_apps.go | ||
| maintained_apps_test.go | ||
| managed_local_account.go | ||
| managed_local_account_test.go | ||
| mdm.go | ||
| mdm_idp_accounts_test.go | ||
| mdm_test.go | ||
| microsoft_mdm.go | ||
| microsoft_mdm_eager_test.go | ||
| microsoft_mdm_property_test.go | ||
| microsoft_mdm_test.go | ||
| migrations_test.go | ||
| mysql.go | ||
| mysql_test.go | ||
| nanomdm_storage.go | ||
| nanomdm_storage_test.go | ||
| operating_system_vulnerabilities.go | ||
| operating_system_vulnerabilities_batch_test.go | ||
| operating_system_vulnerabilities_test.go | ||
| operating_systems.go | ||
| operating_systems_test.go | ||
| packs.go | ||
| packs_test.go | ||
| password_reset.go | ||
| password_reset_test.go | ||
| policies.go | ||
| policies_test.go | ||
| queries.go | ||
| queries_test.go | ||
| query_results.go | ||
| query_results_test.go | ||
| scep.go | ||
| scep_test.go | ||
| scheduled_queries.go | ||
| scheduled_queries_test.go | ||
| schema.sql | ||
| scim.go | ||
| scim_test.go | ||
| scripts.go | ||
| scripts_test.go | ||
| secret_variables.go | ||
| secret_variables_test.go | ||
| sessions.go | ||
| sessions_test.go | ||
| setup_experience.go | ||
| setup_experience_test.go | ||
| software.go | ||
| software_installers.go | ||
| software_installers_test.go | ||
| software_test.go | ||
| software_title_display_names.go | ||
| software_title_icons.go | ||
| software_title_icons_test.go | ||
| software_titles.go | ||
| software_titles_test.go | ||
| software_upgrade_code_test.go | ||
| statistics.go | ||
| statistics_test.go | ||
| targets.go | ||
| targets_test.go | ||
| teams.go | ||
| teams_test.go | ||
| testing_utils.go | ||
| unicode_test.go | ||
| users.go | ||
| users_test.go | ||
| vpp.go | ||
| vpp_test.go | ||
| vulnerabilities.go | ||
| vulnerabilities_test.go | ||
| wstep.go | ||
| wstep_test.go | ||