Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-05-17 14:08:25 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 44
fleet/pkg
History
Ian Littman e96c70e4c0
Pull xz'd goval-dictionary sqlite files to evaluate vulnerabilities on Amazon Linux hosts (#21506) 
#20934

This is tied to https://github.com/fleetdm/vulnerabilities/pull/14; for
supported OS versions (currently Amazon Linux 1/2/2022/2023) we'll pull
XZ'd sqlite files from the vulnerabilities repo and query them to
determine what's vulnerable. See the associated issue for how I
self-QA'd this.

This replaced OVAL parsing for Amazon Linux 2, as we were using the
wrong data source there (Amazon has backported a bunch of fixes to their
own-named releases, so any RHEL fixes don't match).

Some checklist items are missing here; getting this set up in draft to
get code feedback now, and I'll push updates with e.g. docs changes, as
well ass an addition to the changes file.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
    - [x] Add tests to oval_platform
    - [x] Add sync_test
    - [x] Add database_test
- [x] Manual QA for all new/changed functionality
- [x] Update vulnerability management docs
2024-08-26 14:07:42 -05:00
..
buildpkg chore: remove refs to deprecated io/ioutil (#14485) 2023-10-27 15:28:54 -03:00
certificate Fixes to fleetctl debug connection and TLS certs documentation (#20166) 2024-07-09 14:04:23 -03:00
download Pull xz'd goval-dictionary sqlite files to evaluate vulnerabilities on Amazon Linux hosts (#21506) 2024-08-26 14:07:42 -05:00
file Special-case the name of the .exe installer for Notion as it uses non-standard naming (#20881) 2024-07-31 13:56:25 -04:00
filepath_windows Allow custom osquery database on fleetd (#16554) 2024-02-05 09:41:06 -03:00
fleetdbase use the latest fleetd-base version for MDM commands (#20078) 2024-06-28 16:35:07 -03:00
fleethttp add CLI and endpoints to set software via fleetctl apply (#18876) 2024-05-14 15:06:33 -03:00
mdm/mdmtest Fetch installed apps from iPhone/iPad devices. (#20733) 2024-07-28 16:17:27 +02:00
nettest fix RunWithNetRetry (#8590) 2022-11-07 16:31:10 +01:00
open Orbit: Add Fleet Desktop support to Windows (#4873) 2022-04-01 17:28:51 -03:00
optjson Implement Windows OS Updates (feature branch). (#15359) 2023-11-29 11:07:24 -05:00
rawjson Merging Bitlocker feature branch (#14350) 2023-10-06 19:04:33 -03:00
retry Add exponential backoff to orbit enroll retries (#17368) 2024-03-13 07:57:00 -03:00
scripts fix unreleased bugs for the increased script timeout (#15897) 2024-01-04 10:26:13 -03:00
secure Sync CVE scores periodically (#5838) 2022-06-01 10:06:57 -06:00
spec no team software gitops (#20847) 2024-08-05 14:39:10 -03:00
README.md Add CentOS parsing+post-processing to reduce false positives in vulnerability processing (#4037) 2022-02-14 15:13:44 -03:00

README.md

pkg directory

This top-level pkg directory contains packages that may be shared between all fleet backend components.