fleet/tools/software/vulnerabilities/README.md
jacobshandling cb2d42de78
(releases on merge to main) Fix vuln false positives for vscode golang extension (#33839)
**_QA on-branch before merge_**

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
## Resolves #33235 

<img width="2556" height="1419" alt="Screenshot 2025-10-03 at 5 55
40 PM"
src="https://github.com/user-attachments/assets/49078de7-699a-4a64-86ab-f435065f91ed"
/>



- [x] Changes file added for user-visible changes in `changes/`
2025-10-27 14:48:29 -07:00

995 B

Vulnerability Data Seeder

The purpose of seed_vuln_data.go is to provide developers an easy way to insert hosts and software into your local development Fleet server without needing a real host or osquery-perf

Usage

  1. Ensure your local development environment is running using docker-compose up and fleet serve

  2. Optional: Review and modify the software titles in the following files in this folder:

    • software_macos.csv
    • software_ubuntu.csv
    • software_win.csv

    Comma seperated values align directly with the columns in the software table in MySQL

  3. Run the data seeder

go run ./tools/software/vulnerabilities/seed_vuln_data.go --ubuntu 1 --macos 1 --windows 1 --linux-kernels 1

You should now see new hosts with the configured software attached in the UI and database. This tool is idempotent as it will not create duplicate hosts or software titles if run multiple times, however it will not delete software if removed from the CSV files.