fleet/server
Ian Littman e8a6456f13
Don't reuse GitHub HTTP client to pull MSRC feeds (#22493)
See #22492

As of today, MSRC's API will 401 if you pass it a JWT it doesn't expect,
and by reusing the GitHub API HTTP client for MSRC pulls we were passing
the API an unexpected JWT. Wasn't able to reproduce this locally because
I didn't need a GitHub token locally to pull release details, while the
token is populated in Actions. Was able to repro both the issue and this
fix inside Actions on my fork.

This also updates to call v3.0 of the API directly, which v2.0 has been
redirecting to for awhile.

Finally, adds slightly better logging so we know which part of the feed
generation process we're in when we're running this in Actions.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-09-27 21:23:48 -05:00
..
authz Can run install scripts now. 2024-09-06 09:49:28 -05:00
bindata Allow users to be readded if they were ever removed (#1945) 2021-09-07 13:33:40 -03:00
config Add docs around server WriteTimeout (#22153) 2024-09-17 10:21:54 -03:00
contexts feat: enable multiple ABM and VPP tokens (#21693) 2024-08-29 18:51:46 -04:00
cron Improvements to go tests in CI (#21545) 2024-08-26 08:55:53 -05:00
datastore fix VPP migration edge case (#22460) 2024-09-27 14:13:27 -03:00
docs Add data retention section to backend patterns.md (#22015) 2024-09-11 16:14:40 -05:00
errorstore 🧹 friday cleanup party: substitute deprecated import of go-kit (#19774) 2024-06-17 10:27:31 -03:00
fleet Make software batch endpoint asynchronous (#22258) 2024-09-20 11:55:47 -03:00
goose Move external dependency goose to monorepo (#15859) 2024-01-02 17:52:00 -03:00
health 🧹 friday cleanup party: substitute deprecated import of go-kit (#19774) 2024-06-17 10:27:31 -03:00
launcher 🧹 friday cleanup party: substitute deprecated import of go-kit (#19774) 2024-06-17 10:27:31 -03:00
live_query Fix flakey livequery test (#21666) 2024-08-29 10:03:45 -06:00
logging 🧹 friday cleanup party: substitute deprecated import of go-kit (#19774) 2024-06-17 10:27:31 -03:00
mail support external id in STS Assume Role calls (#18901) 2024-05-21 13:19:35 -04:00
mdm Updating scep package with latest fixes (#22372) 2024-09-27 07:04:11 -05:00
mock Make software batch endpoint asynchronous (#22258) 2024-09-20 11:55:47 -03:00
policies 🧹 friday cleanup party: substitute deprecated import of go-kit (#19774) 2024-06-17 10:27:31 -03:00
ptr Add Description text to CVE Metadata (#13856) 2023-09-15 11:24:10 -06:00
pubsub Address multiple redis-related issues observed with live queries (#16855) 2024-02-27 19:35:27 -06:00
service Updating scep package with latest fixes (#22372) 2024-09-27 07:04:11 -05:00
shellquote Fleet server now accepts arguments via stdin (#21124) 2024-08-07 15:17:14 +02:00
sso chore: remove refs to deprecated io/ioutil (#14485) 2023-10-27 15:28:54 -03:00
test Delete apps associated with VPP tokens when they're moved or deleted (#21852) 2024-09-06 09:14:09 -04:00
version Move external dependency fleetdm/kolide-kit to monorepo (#15861) 2024-01-02 18:22:52 -03:00
vulnerabilities Don't reuse GitHub HTTP client to pull MSRC feeds (#22493) 2024-09-27 21:23:48 -05:00
webhooks In policy webhook, made sure the failing_host_count is never 0 (#21248) 2024-08-14 19:55:47 +02:00
websocket Enable errcheck linter for golangci-lint (#8899) 2022-12-05 16:50:49 -06:00
worker MABM: fixes and re-enable integration tests (#21834) 2024-09-05 14:10:35 -03:00
utils.go fix: return bad request error during MDM migration when appropriate (#16551) 2024-03-06 15:38:44 -05:00
utils_test.go feature: target profiles by labels (#16202) 2024-01-26 11:00:58 -05:00