Victor Lyuboslavsky 6b7d232522 Additional CA validation (#27169) ... For #26623 - Updated `github.com/groob/plist` to `github.com/micromdm/plist` -- it was renamed - Added validation that restricts DigiCert Fleet variables to `com.apple.security.pkcs12` payloads plus additional restrictions - Added validation that restricts Custom SCEP Fleet variables to `com.apple.security.scep` payloads plus additional restrictions - Enabled multiple CAs (Fleet variables) to be present in an Apple MDM profile. But each CA can only be used once. For example, we can have DigiCert CA and Custom SCEP CA in one Apple profile. # Checklist for submitter - [x] If database migrations are included, checked table schema to confirm autoupdate - For database migrations: - [x] Checked schema for all modified table for columns that will auto-update timestamps during migration. - [x] Confirmed that updating the timestamps is acceptable, and will not cause unwanted side effects. - [x] Ensured the correct collation is explicitly set for character columns (`COLLATE utf8mb4_unicode_ci`). - [x] Added/updated automated tests - [x] A detailed QA plan exists on the associated ticket (if it isn't there, work with the product group's QA engineer to add it) - [x] Manual QA for all new/changed functionality		2025-03-19 08:27:55 -05:00
..
android	Basic Android MDM on/off functionality (#26309)	2025-02-18 09:43:11 -06:00
api	added mention of new vuln endpoint (#17912)	2024-05-29 17:08:05 -06:00
apm-elastic	Adding missing instrumentation for APM. (#23882)	2024-11-18 09:58:24 -06:00
app	Fix SSO paths to always use /v1/ instead of /latest/ (#5246)	2022-04-20 12:46:45 -04:00
backup_db	Clear db before restoring from backup (#26928)	2025-03-10 10:01:52 -05:00
bomutils-docker	Remove invalid --depth=1 (#23316)	2024-10-29 15:22:39 -05:00
calendar	Updating golangci-lint to 1.61.0 (#22973)	2024-10-18 12:38:26 -05:00
ci	Updated custom lint rules to include Android datastore. (#26722)	2025-02-28 15:08:39 -06:00
cis	Script for comparing two CIS PDF files (#15307)	2023-12-06 09:21:12 -05:00
cloner-check	Add LabelsIncludeAny to queries endpoint (#26823)	2025-03-11 09:45:01 -04:00
custom-package-parser	Correct fix for long MSI interned strings (#25104)	2025-01-02 14:43:36 -06:00
dbutils	Auto-generate and check Android schema.sql (#26720)	2025-02-28 16:30:40 -06:00
desktop	Move external dependency fleetdm/kolide-kit to monorepo (#15861)	2024-01-02 18:22:52 -03:00
dialog	add kdialog for kubuntu key escrow (#24405)	2024-12-05 08:44:16 -07:00
fdm	Add help system to Makefile + FDM command (#25028)	2025-02-28 07:42:32 -06:00
file-server	Switching systray dependency to one without glibc requirements (#14197)	2023-11-02 14:40:21 -05:00
fleet-docker	Update alpine to patch vulnerability with severity "HIGH" (#26593)	2025-02-25 18:33:24 -03:00
fleetctl-docker	Lock rust dependencies for apple-codesign (#24123)	2024-11-25 11:04:21 -03:00
fleetctl-npm	Adding changes for Fleet v4.65.0 (#26698) (#27166)	2025-03-18 11:18:10 -05:00
fleetd-linux	Added fleetd docker images to test/develop linux fleetd features (#25027)	2024-12-27 16:16:39 -03:00
inspect-cert	chore: remove refs to deprecated io/ioutil (#14485)	2023-10-27 15:28:54 -03:00
jira-integration	Updating golangci-lint to 1.61.0 (#22973)	2024-10-18 12:38:26 -05:00
kubequery	Move kubequery dependency to monorepo (#16027)	2024-01-11 08:30:26 -03:00
loadtest	Add script execs and software installs stats to osquery-perf (#26239)	2025-02-11 12:46:53 -05:00
luks	add kdialog for kubuntu key escrow (#24405)	2024-12-05 08:44:16 -07:00
mailpit	Fix SMTP e-mail send when SMTP server has credentials (#10758)	2023-03-28 15:23:15 -03:00
makefile-support	Add help system to Makefile + FDM command (#25028)	2025-02-28 07:42:32 -06:00
mdm	Additional CA validation (#27169)	2025-03-19 08:27:55 -05:00
mysql-replica-testing	MySQL 8.0 Migration (#20225)	2024-07-22 16:27:36 -04:00
nvd/nvdvuln	Add gosimple linter (#23250)	2024-10-29 14:17:51 -05:00
oncall	Updated developer on-call (#26795)	2025-03-10 11:28:08 -05:00
osquery	Quick spelling/grammar fixes (#23859)	2024-11-18 13:36:59 -06:00
osquery-agent-options	Add capability to serve YARA rules via authenticated Fleet endpoints (#23343)	2024-11-13 09:01:08 -08:00
osquery-testing	15135 remove atom package (#15410)	2023-12-04 14:26:26 -05:00
percona/test	MySQL 8.0 Migration (#20225)	2024-07-22 16:27:36 -04:00
redis-stress	Add redis stress (#3363)	2022-01-20 16:18:17 -03:00
redis-tests	Bump go to 1.19.1 (#7690)	2022-09-12 20:32:43 -03:00
release	Update release instructions to include updating the fleetdm/terraform repo (#27153)	2025-03-14 15:33:23 -05:00
run-scripts	Implement script execution on the fleetd agent (disabled by default) (#13569)	2023-08-30 14:02:44 -04:00
saml	use the configured EntityID for audience validation on MDM SSO (#16144)	2024-01-22 14:30:45 -03:00
seed_data	Updating golangci-lint to 1.61.0 (#22973)	2024-10-18 12:38:26 -05:00
sentry-self-hosted	Fix stack trace of captured errors in Sentry, capture errors in more code paths (#16966)	2024-02-22 15:10:28 -03:00
sign-fleetctl	sign fleetctl for macOS during releases (#16670)	2024-04-19 14:36:30 -03:00
smtp4dev	14729 smtp settings validation for TLS (#15029)	2023-11-21 11:48:21 -07:00
snapshot	Add Fleet dev snapshot tool (#25909)	2025-02-05 09:52:10 -06:00
team-builder	Add team builder script (#10086)	2023-05-03 09:55:14 -07:00
telemetry	Scope pending host profile rebuilds (#23772)	2024-11-15 11:55:30 -05:00
terraform	Bump golang.org/x/net from 0.33.0 to 0.36.0 in /tools/terraform (#27095)	2025-03-13 07:35:32 -03:00
test-certs	Add fake certificates for testing TLS issues (#20390)	2024-07-16 13:21:39 -03:00
test-orbit-mtls	Fixing SSL certificates to make them valid. (#16359)	2024-01-31 12:00:59 -06:00
test_extensions/hello_world	Add support for Linux ARM64 (#19931)	2024-07-17 16:07:59 -04:00
testdata	Add fixtures for software and vulnerabilities end-to-end tests (#6337)	2022-06-23 10:01:37 -05:00
tuf	Fixes to releaser.sh (#26397)	2025-02-17 19:10:55 -03:00
webhook	Additional changes to happy path and cleanup cron job (#17757)	2024-03-26 13:39:37 -05:00
windows-mdm-enroll	Implement Windows MDM programmatic unenrollment (notification + orbit trigger) (#12505)	2023-06-28 09:13:37 -04:00
wix-docker	Update fleetdm/fleetctl, fleetdm/wix and fleetdm/bomutils docker images (#21063)	2024-08-20 14:07:59 -03:00
zendesk-integration	Updating golangci-lint to 1.61.0 (#22973)	2024-10-18 12:38:26 -05:00