fleet/schema/tables/keychain_items.yml
Eric 02437a098e
Schema: change default block scalar used in schema override files (#19296)
Closes: #19271
Closes: #19286

Changes:
- Updated the example in the schema folder readme
- Updated the block scalar used in Fleet's osquery override
documentation (`>-` » `|-`) and removed extra newlines
- Updated the block scalar used in URLs used to create new yaml override
files
- Regenerated osqeury_fleet_schema.json
2024-05-27 18:18:56 -05:00

13 lines
542 B
YAML

name: keychain_items
columns:
- name: created
description: Date item was created
examples: |-
Identify Macs that contain certificates related to Apple application signing
and notarization. (replace with your Apple Developer ID string)
```
SELECT * FROM keychain_items WHERE label LIKE '%8EHZ83LZNU%';
```
notes: |-
- This table should be used sparingly as it uses an Apple API which occasionally corrupts the underlying certificate. Learn more [here](https://github.com/fleetdm/fleet/issues/13065#issuecomment-1658849614).