mirror of
https://github.com/fleetdm/fleet
synced 2026-05-24 09:28:54 +00:00
227e94de5b
Some checks are pending
Build binaries / build-binaries (push) Waiting to run
Check automated documentation is up-to-date / check-doc-gen (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
Deploy Fleet website / build (20.x) (push) Waiting to run
Apply latest configuration to dogfood with GitOps / fleet-gitops (push) Waiting to run
Test latest changes in fleetctl preview / test-preview (ubuntu-latest) (push) Waiting to run
golangci-lint / lint (push) Waiting to run
golangci-lint / lint-incremental (push) Waiting to run
Docker publish / publish (push) Waiting to run
Ingest maintained apps / build (push) Waiting to run
OSSF Scorecard / Validate Gradle wrapper (push) Waiting to run
OSSF Scorecard / Scorecard analysis (push) Waiting to run
Sync Maintained Apps Outputs to R2 / sync-to-r2 (push) Waiting to run
Test DB Changes / test-db-changes (push) Waiting to run
Run fleetd-chrome tests / test-fleetd-chrome (ubuntu-latest) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, integration-mdm) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, main) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, mysql) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, service) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, vuln) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, fleetctl) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, integration-core) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, integration-enterprise) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, integration-mdm) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, main) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, mysql) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, service) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, vuln) (push) Waiting to run
Go Tests / test-go-nanomdm (push) Waiting to run
Go Tests / test-go-no-db (fast) (push) Waiting to run
Go Tests / test-go-no-db (scripts) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, fleetctl) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, fleetctl) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, integration-core) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, integration-enterprise) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, integration-mdm) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, integration-core) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, main) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, mysql) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, service) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, vuln) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, fleetctl) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, integration-core) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, integration-enterprise) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, integration-mdm) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, integration-enterprise) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, main) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, mysql) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, service) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, vuln) (push) Waiting to run
Go Tests / upload-coverage (push) Blocked by required conditions
Go Tests / aggregate-result (push) Blocked by required conditions
JavaScript Tests / test-js (ubuntu-latest) (push) Waiting to run
JavaScript Tests / lint-js (ubuntu-latest) (push) Waiting to run
Test Mock Changes / test-mock-changes (push) Waiting to run
Test native tooling packaging / test-packaging (local, ubuntu-latest) (push) Waiting to run
Test native tooling packaging / test-packaging (remote, ubuntu-latest) (push) Waiting to run
Test Puppet / test-puppet (push) Waiting to run
<!-- Add the related story/sub-task/bug number, like Resolves #123, or remove if NA --> **Related issue:** Resolves #44723 # Checklist for submitter If some of the following don't apply, delete the relevant line. - [x] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. See [Changes files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files) for more information. - [x] Input data is properly validated, `SELECT *` is avoided, SQL injection is prevented (using placeholders for values in statements), JS inline code is prevented especially for url redirects, and untrusted data interpolated into shell scripts/commands is validated against shell metacharacters. - [x] If paths of existing endpoints are modified without backwards compatibility, checked the frontend/CLI for any necessary changes ## Testing - [x] Added/updated automated tests - [x] Where appropriate, [automated tests simulate multiple hosts and test for host isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing) (updates to one hosts's records do not affect another) - [ ] QA'd all new/changed functionality manually <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Bug Fixes** * Strengthened validation of sorting/order parameters across many list and cursor-based endpoints — unsupported sort keys now return explicit errors and prevent unsafe queries. * Labels listing: label-list pagination query name changed; ordering by host_count is rejected when host counts are disabled (validated at request parsing). * **Tests** * Added/expanded tests covering allowed order keys, rejection of unknown keys, and pagination behavior for multiple listing APIs. <!-- end of auto-generated comment: release notes by coderabbit.ai --> --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: Lucas Manuel Rodriguez <lucas@fleetdm.com> |
||
|---|---|---|
| .. | ||
| async | ||
| calendar | ||
| conditional_access_microsoft_proxy | ||
| contract | ||
| externalsvc | ||
| integrationtest | ||
| middleware | ||
| mock | ||
| osquery_utils | ||
| redis_key_value | ||
| redis_lock | ||
| redis_policy_set | ||
| schedule | ||
| testdata | ||
| activities.go | ||
| activities_test.go | ||
| api_endpoints.go | ||
| appconfig.go | ||
| appconfig_test.go | ||
| apple_mdm.go | ||
| apple_mdm_cmd_results.go | ||
| apple_mdm_cmd_results_test.go | ||
| apple_mdm_ddm_test.go | ||
| apple_mdm_test.go | ||
| build_tags_test.go | ||
| calendar.go | ||
| campaigns.go | ||
| campaigns_test.go | ||
| carves.go | ||
| carves_test.go | ||
| certificate_authorities.go | ||
| certificate_authorities_test.go | ||
| certificate_templates.go | ||
| certificate_templates_test.go | ||
| certificates.go | ||
| client.go | ||
| client_android_certificates.go | ||
| client_appconfig.go | ||
| client_carves.go | ||
| client_certificate_authorities.go | ||
| client_compat.go | ||
| client_debug.go | ||
| client_hosts.go | ||
| client_labels.go | ||
| client_live_query.go | ||
| client_live_query_test.go | ||
| client_mdm.go | ||
| client_mdm_test.go | ||
| client_packs.go | ||
| client_policies.go | ||
| client_profiles.go | ||
| client_queries.go | ||
| client_scripts.go | ||
| client_secret_variables.go | ||
| client_sessions.go | ||
| client_setup.go | ||
| client_software.go | ||
| client_targets.go | ||
| client_teams.go | ||
| client_test.go | ||
| client_trigger.go | ||
| client_users.go | ||
| conditional_access_idp.go | ||
| conditional_access_idp_test.go | ||
| conditional_access_microsoft.go | ||
| cron_schedules.go | ||
| cron_schedules_test.go | ||
| debug_handler.go | ||
| debug_handler_test.go | ||
| devices.go | ||
| devices_endpoint_test.go | ||
| devices_test.go | ||
| devices_url_auth_test.go | ||
| endpoint_campaigns.go | ||
| endpoint_middleware.go | ||
| endpoint_middleware_test.go | ||
| endpoint_setup.go | ||
| endpoint_utils.go | ||
| endpoint_utils_test.go | ||
| frontend.go | ||
| frontend_test.go | ||
| full_test.go | ||
| global_policies.go | ||
| global_policies_test.go | ||
| global_schedule.go | ||
| global_schedule_test.go | ||
| handler.go | ||
| handler_deprecated_paths.go | ||
| handler_test.go | ||
| hosts.go | ||
| hosts_reports_test.go | ||
| hosts_test.go | ||
| http_auth_test.go | ||
| integration_android_certificate_templates_test.go | ||
| integration_android_software_test.go | ||
| integration_certificate_authorities_test.go | ||
| integration_core_test.go | ||
| integration_desktop_test.go | ||
| integration_ds_only_test.go | ||
| integration_enterprise_test.go | ||
| integration_enterprise_vulns_test.go | ||
| integration_install_test.go | ||
| integration_live_queries_test.go | ||
| integration_logger_test.go | ||
| integration_mdm_commands_test.go | ||
| integration_mdm_ddm_test.go | ||
| integration_mdm_dep_test.go | ||
| integration_mdm_lifecycle_test.go | ||
| integration_mdm_profiles_test.go | ||
| integration_mdm_release_worker_test.go | ||
| integration_mdm_setup_experience_test.go | ||
| integration_mdm_test.go | ||
| integration_smtp_test.go | ||
| integration_software_titles_test.go | ||
| integration_sso_test.go | ||
| integration_vpp_install_test.go | ||
| invites.go | ||
| invites_test.go | ||
| jitter.go | ||
| jitter_test.go | ||
| labels.go | ||
| labels_test.go | ||
| labels_util.go | ||
| linux_mdm.go | ||
| linux_mdm_test.go | ||
| live_queries.go | ||
| mail_test.go | ||
| maintained_apps.go | ||
| maintained_apps_test.go | ||
| mdm.go | ||
| mdm_profiles.go | ||
| mdm_profiles_test.go | ||
| mdm_scep.go | ||
| mdm_test.go | ||
| mem_failing_policies_set_test.go | ||
| metrics.go | ||
| metrics_appconfig.go | ||
| metrics_change_email.go | ||
| metrics_invites.go | ||
| metrics_labels.go | ||
| metrics_sessions.go | ||
| metrics_users.go | ||
| microsoft_mdm.go | ||
| microsoft_mdm_integration_test.go | ||
| microsoft_mdm_test.go | ||
| orbit.go | ||
| orbit_eua_test.go | ||
| orbit_test.go | ||
| org_logo.go | ||
| org_logo_test.go | ||
| osquery.go | ||
| osquery_test.go | ||
| packs.go | ||
| packs_test.go | ||
| queries.go | ||
| queries_test.go | ||
| reconcile_windows_profiles_property_test.go | ||
| scheduled_queries.go | ||
| scheduled_queries_test.go | ||
| scim.go | ||
| scripts.go | ||
| scripts_encoding.go | ||
| scripts_encoding_test.go | ||
| scripts_test.go | ||
| secret_variables.go | ||
| secret_variables_test.go | ||
| service.go | ||
| service_appconfig.go | ||
| service_appconfig_test.go | ||
| service_campaign_test.go | ||
| service_campaigns.go | ||
| service_errors.go | ||
| service_users.go | ||
| sessions.go | ||
| sessions_test.go | ||
| setup_experience.go | ||
| setup_experience_test.go | ||
| software.go | ||
| software_installers.go | ||
| software_installers_test.go | ||
| software_test.go | ||
| software_title_icons.go | ||
| software_title_icons_test.go | ||
| software_titles.go | ||
| software_titles_test.go | ||
| status.go | ||
| targets.go | ||
| targets_test.go | ||
| team_policies.go | ||
| team_policies_test.go | ||
| team_schedule.go | ||
| team_schedule_test.go | ||
| teams.go | ||
| teams_test.go | ||
| testing_client.go | ||
| testing_utils.go | ||
| translator.go | ||
| transport.go | ||
| transport_error.go | ||
| transport_setup.go | ||
| transport_test.go | ||
| trigger.go | ||
| user_roles.go | ||
| users.go | ||
| users_test.go | ||
| validation_setup.go | ||
| vpp.go | ||
| vpp_test.go | ||
| vulnerabilities.go | ||
| vulnerabilities_test.go | ||
| windows_mdm_profiles.go | ||
| windows_mdm_profiles_test.go | ||