fleet/orbit/pkg/table/crowdstrike/falconctl
Ian Littman a5299d4eb6
Make various fixes to falconctl parsing to remove errors on selecting from the falconctl_options table (#35479)
Fixes #32239.

This changes tags to return a comma-delimited list on multiple tags, the
single tag when there's only one, and "is not set" (similar to other
values) when no tags are set.

Confirmed that this allows us to run `SELECT * FROM falconctl_options`
without issue on various configurations of Crowdstrike Falcon on Linux.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)

## Testing

- [x] Added/updated automated tests

- [x] QA'd all new/changed functionality manually

## fleetd/orbit/Fleet Desktop

- [x] Verified compatibility with the latest released version of Fleet
(see [Must
rule](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/workflows/fleetd-development-and-release-strategy.md))
- [x] If the change applies to only one platform, confirmed that
`runtime.GOOS` is used as needed to isolate changes
2025-11-11 18:11:04 -06:00
..
test-data Add Kolide osquery tables 2023-11-01 20:11:35 -06:00
parser.go Make various fixes to falconctl parsing to remove errors on selecting from the falconctl_options table (#35479) 2025-11-11 18:11:04 -06:00
parser_test.go Make various fixes to falconctl parsing to remove errors on selecting from the falconctl_options table (#35479) 2025-11-11 18:11:04 -06:00
table.go Make various fixes to falconctl parsing to remove errors on selecting from the falconctl_options table (#35479) 2025-11-11 18:11:04 -06:00
table_test.go fix: use zerolog for orbit osquery table logging (#20028) 2024-06-27 13:26:20 -04:00