fleet/.github
Allen Houchins 99ce080e3e
Implement policy checks and automated updates (#25829)
This is the initial pull request to implement keeping policy logic up to
date automatically. For example, when a new version of macOS releases,
admins don't need to manually update the policy logic for checking
version numbers.

This is currently blocked by this issue: fleetdm/confidential#9470
This is also to support the following issue and demonstrate to customers
a fully automated patch management strategy:
https://github.com/fleetdm/confidential/issues/8825

This current iteration contains a script/workflow that runs every 6
hours to check if a new version of macOS has been released and compares
the version string to what is currently defined in our policy. If it
detects a change, it will automatically create a new branch with the
updated version string and create a pull request to be reviewed before
merging.
2025-01-30 20:55:22 -06:00
..
actions/r2-upload Keep all fleetd-base and fleetd-chrome artifacts. (#19749) 2024-06-17 15:49:06 -05:00
ISSUE_TEMPLATE Add GitOps mode to product changes section (#25890) 2025-01-30 17:28:25 -05:00
scripts Implement policy checks and automated updates (#25829) 2025-01-30 20:55:22 -06:00
workflows Implement policy checks and automated updates (#25829) 2025-01-30 20:55:22 -06:00
dependabot.yml Remove daily schedule so it only gets triggered by security alerts (#14871) 2023-11-02 09:53:40 -05:00
pull_request_template.md Add "should have a QA plan on the associated ticket" to PR checklist (#25053) 2025-01-02 15:41:19 -06:00