empayre/fleet
14
0
Fork 0
mirror of https://github.com/empayre/fleet.git synced 2024-11-06 00:45:19 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
7c34956d31
fleet/go.mod

83 lines
3.4 KiB
Modula-2
Raw Normal View History

Add v4 suffix in go.mod (#1224)
2021-06-26 04:46:51 +00:00
module github.com/fleetdm/fleet/v4
Migrate dependencies to go modules (#2094) These changes should be transparent to users and developers. Thanks to @davepgreene who made the first stab at this.
2019-08-13 17:32:23 +00:00
Implement license loading and validation (#908) - Load license from ES256 signed JWT key. - Parse license claims into LicenseInfo struct. - Update contribution documentation with sample license key. Closes #816.
2021-05-31 18:35:15 +00:00
go 1.16
Migrate dependencies to go modules (#2094) These changes should be transparent to users and developers. Thanks to @davepgreene who made the first stab at this.
2019-08-13 17:32:23 +00:00
require (
Implement license loading and validation (#908) - Load license from ES256 signed JWT key. - Parse license claims into LicenseInfo struct. - Update contribution documentation with sample license key. Closes #816.
2021-05-31 18:35:15 +00:00
cloud.google.com/go/pubsub v1.5.0
Implement fleetctl goquery (#2186) - Update fleet APIs to support necessary operations in goquery - Implement support for goquery in fleetctl
2020-01-24 05:27:20 +00:00
github.com/AbGuthrie/goquery/v2 v2.0.1
Test and correct semantics for MySQL withRetryTxx (#488) - Differentiate retryable vs. non-retryable errors. - Test functionality against mocked DB.
2021-03-17 18:23:52 +00:00
github.com/DATA-DOG/go-sqlmock v1.5.0
Implement license loading and validation (#908) - Load license from ES256 signed JWT key. - Parse license claims into LicenseInfo struct. - Update contribution documentation with sample license key. Closes #816.
2021-05-31 18:35:15 +00:00
github.com/OneOfOne/xxhash v1.2.8 // indirect
Run go mod tidy (#2098)
2019-08-14 18:11:20 +00:00
github.com/VividCortex/gohistogram v1.0.0 // indirect
Migrate dependencies to go modules (#2094) These changes should be transparent to users and developers. Thanks to @davepgreene who made the first stab at this.
2019-08-13 17:32:23 +00:00
github.com/VividCortex/mysqlerr v0.0.0-20170204212430-6c6b55f8796f
github.com/WatchBeam/clock v0.0.0-20170901150240-b08e6b4da7ea
Implement license loading and validation (#908) - Load license from ES256 signed JWT key. - Parse license claims into LicenseInfo struct. - Update contribution documentation with sample license key. Closes #816.
2021-05-31 18:35:15 +00:00
github.com/apache/thrift v0.13.0 // indirect
github.com/aws/aws-sdk-go v1.36.30
Update goxmldsig dependency (#2177) Update the github.com/russellhaering/goxmldsig dependency and apply the appropriate fixes for the API changes. This is a preparation for integration with github.com/AbGuthrie/goquery, which uses a newer version of the dependency.
2020-01-14 00:15:14 +00:00
github.com/beevik/etree v1.1.0
Implement license loading and validation (#908) - Load license from ES256 signed JWT key. - Parse license claims into LicenseInfo struct. - Update contribution documentation with sample license key. Closes #816.
2021-05-31 18:35:15 +00:00
github.com/beorn7/perks v1.0.1 // indirect
Migrate dependencies to go modules (#2094) These changes should be transparent to users and developers. Thanks to @davepgreene who made the first stab at this.
2019-08-13 17:32:23 +00:00
github.com/briandowns/spinner v0.0.0-20170614154858-48dbb65d7bd5
Retry sqlx transactions (#2203) - Add exponential backoff method to MySQL datastore - Refactor queries using transaction to use backup. Fixes #845
2020-03-11 01:14:02 +00:00
github.com/cenkalti/backoff/v4 v4.0.0
Format and clean code (#774) 1. use [staticcheck](https://staticcheck.io/) to check the code, and fix some issues. 2. use `go fmt` to format the code. 3. use `go mod tidy` clean the go mod.
2021-05-17 17:29:50 +00:00
github.com/davecgh/go-spew v1.1.1
Make creating dirs and files more secure by checking permissions (#1566) * Add safe mkdirall and open * Use secure as much as possible and merge gomodules for orbit to fleet * Improve openfile and mkdirall to check for permissiveness instead of equality * Don't shift * Fix links * Address review comments
2021-08-11 14:02:22 +00:00
github.com/dgraph-io/badger/v2 v2.2007.2
Issue 1435 software to cpe (#1488) * WIP * WIP * Make path optional and fix tests * Add first generate * Move to nvd package * remove replace * Re-add replace * It's path, not file name * Change how db path is set and use etag * Fix typos * Make db generation faster * Remove quotes * Doesn't like comments * Samitize etag and save to file * Refactor some things and improve writing of etagenv * Compress file and truncate amount of items for faster testing * Remove quotes * Try to improve performance * Ignore truncate error if not exists * Minor cleanup and make sqlite have cpe prefix * Simplify code and test sync * Add VCR for sync test * Check for nvdRelease nil * Add test for the actual translation * Address review comments * Rename generate command because we'll have a cve one too * Move to its own dir * Address review comments
2021-07-29 16:10:34 +00:00
github.com/dnaeon/go-vcr/v2 v2.0.1
Migrate dependencies to go modules (#2094) These changes should be transparent to users and developers. Thanks to @davepgreene who made the first stab at this.
2019-08-13 17:32:23 +00:00
github.com/e-dard/netbug v0.0.0-20151029172837-e64d308a0b20
github.com/elazarl/go-bindata-assetfs v1.0.0
Process stored CPEs and store found CVEs (#1533) * WIP * WIP * Make path optional and fix tests * Add first generate * Move to nvd package * remove replace * Re-add replace * It's path, not file name * Change how db path is set and use etag * Fix typos * Make db generation faster * Remove quotes * Doesn't like comments * Samitize etag and save to file * Refactor some things and improve writing of etagenv * Compress file and truncate amount of items for faster testing * Remove quotes * Try to improve performance * Ignore truncate error if not exists * Minor cleanup and make sqlite have cpe prefix * Simplify code and test sync * Add VCR for sync test * Check for nvdRelease nil * Add test for the actual translation * Address review comments * Rename generate command because we'll have a cve one too * Move to its own dir * Add first cve db generation * WIP but with final strategy, preparring to merge main * Fix merge conflicts * WIP * wip * Insert CVEs to the db * Remove unused code * Use wg instead of counting * Call cancelFunc to avoid ctx leak * Fix logs for better readability * Point code to fleetdm instead of my repo
2021-08-04 21:01:39 +00:00
github.com/facebookincubator/flog v0.0.0-20190930132826-d2511d0ce33c // indirect
Issue 1435 software to cpe (#1488) * WIP * WIP * Make path optional and fix tests * Add first generate * Move to nvd package * remove replace * Re-add replace * It's path, not file name * Change how db path is set and use etag * Fix typos * Make db generation faster * Remove quotes * Doesn't like comments * Samitize etag and save to file * Refactor some things and improve writing of etagenv * Compress file and truncate amount of items for faster testing * Remove quotes * Try to improve performance * Ignore truncate error if not exists * Minor cleanup and make sqlite have cpe prefix * Simplify code and test sync * Add VCR for sync test * Check for nvdRelease nil * Add test for the actual translation * Address review comments * Rename generate command because we'll have a cve one too * Move to its own dir * Address review comments
2021-07-29 16:10:34 +00:00
github.com/facebookincubator/nvdtools v0.1.4
Issue 1600 fleetctl license expiration (#1800) * Show banner in fleet and fleetctl if license expired * Ignore if license is nil or tier is core * Address review comments
2021-08-26 13:28:53 +00:00
github.com/fatih/color v1.12.0
Initial backend software inventory implementation (#678) - Maintain software inventory with detail queries. - Associated database migrations. - Feature flagged off by default (see documentation for details to turn on). - Documentation. - New test helper for slice element comparisons skipping ID.
2021-04-26 15:44:22 +00:00
github.com/fleetdm/goose v0.0.0-20210209032905-c3c01484bacb
Migrate dependencies to go modules (#2094) These changes should be transparent to users and developers. Thanks to @davepgreene who made the first stab at this.
2019-08-13 17:32:23 +00:00
github.com/ghodss/yaml v1.0.0
Add rate-limiting to login and password reset (#543) Prevent abuse of these endpoints with rate limiting backed by Redis. The limits assigned should be appropriate for almost any Fleet deployment. Closes #530
2021-03-26 18:23:29 +00:00
github.com/go-kit/kit v0.9.0
Implement license loading and validation (#908) - Load license from ES256 signed JWT key. - Parse license claims into LicenseInfo struct. - Update contribution documentation with sample license key. Closes #816.
2021-05-31 18:35:15 +00:00
github.com/go-logfmt/logfmt v0.5.0 // indirect
Update github.com/go-sql-driver/mysql to 1.5.0 (#2321)
2020-10-08 16:17:08 +00:00
github.com/go-sql-driver/mysql v1.5.0
Update JWT library to github.com/golang-jwt/jwt (#1568) - The former repo has been migrated (see https://github.com/dgrijalva/jwt-go/issues/462). - Dependabot alerted on a security issue in the old version (https://github.com/advisories/GHSA-w73w-5m7g-f7qc). This issue should not effect Fleet due to no use of `aud` claims.
2021-08-06 15:49:38 +00:00
github.com/golang-jwt/jwt/v4 v4.0.0
Fix redis locking receive (#1655) * Receive redis data with timeout to not hold the connection * Address review comments
2021-08-13 14:16:11 +00:00
github.com/gomodule/redigo v1.8.5
Issue 1435 software to cpe (#1488) * WIP * WIP * Make path optional and fix tests * Add first generate * Move to nvd package * remove replace * Re-add replace * It's path, not file name * Change how db path is set and use etag * Fix typos * Make db generation faster * Remove quotes * Doesn't like comments * Samitize etag and save to file * Refactor some things and improve writing of etagenv * Compress file and truncate amount of items for faster testing * Remove quotes * Try to improve performance * Ignore truncate error if not exists * Minor cleanup and make sqlite have cpe prefix * Simplify code and test sync * Add VCR for sync test * Check for nvdRelease nil * Add test for the actual translation * Address review comments * Rename generate command because we'll have a cve one too * Move to its own dir * Address review comments
2021-07-29 16:10:34 +00:00
github.com/google/go-cmp v0.5.6
github.com/google/go-github/v37 v37.0.0
Merge branch 'main' into teams
2021-06-18 16:42:20 +00:00
github.com/google/uuid v1.1.2
Make creating dirs and files more secure by checking permissions (#1566) * Add safe mkdirall and open * Use secure as much as possible and merge gomodules for orbit to fleet * Improve openfile and mkdirall to check for permissiveness instead of equality * Don't shift * Fix links * Address review comments
2021-08-11 14:02:22 +00:00
github.com/goreleaser/nfpm/v2 v2.2.2
Implement license loading and validation (#908) - Load license from ES256 signed JWT key. - Parse license claims into LicenseInfo struct. - Update contribution documentation with sample license key. Closes #816.
2021-05-31 18:35:15 +00:00
github.com/gorilla/mux v1.8.0
Upgrade SockJS JS and Go dependencies (#2256)
2020-07-07 03:04:04 +00:00
github.com/gorilla/websocket v1.4.2
Add pretty-printing option for query results (#4) Use --pretty to enable this feature. This will likely break on non-ANSI terminals.
2020-11-04 17:56:57 +00:00
github.com/gosuri/uilive v0.0.4
Make creating dirs and files more secure by checking permissions (#1566) * Add safe mkdirall and open * Use secure as much as possible and merge gomodules for orbit to fleet * Improve openfile and mkdirall to check for permissiveness instead of equality * Don't shift * Fix links * Address review comments
2021-08-11 14:02:22 +00:00
github.com/hectane/go-acl v0.0.0-20190604041725-da78bae5fc95
Upgrade SockJS JS and Go dependencies (#2256)
2020-07-07 03:04:04 +00:00
github.com/igm/sockjs-go/v3 v3.0.0
Make creating dirs and files more secure by checking permissions (#1566) * Add safe mkdirall and open * Use secure as much as possible and merge gomodules for orbit to fleet * Improve openfile and mkdirall to check for permissiveness instead of equality * Don't shift * Fix links * Address review comments
2021-08-11 14:02:22 +00:00
github.com/jmoiron/sqlx v1.2.1-0.20190826204134-d7d95172beb5
Merge pull request from GHSA-w3wf-cfx3-6gcx * Update github.com/russellhaering/goxmldsig * Update signature validation to include Mattermost XML validator
2020-12-15 02:14:14 +00:00
github.com/jonboulle/clockwork v0.2.2 // indirect
Add rate-limiting to login and password reset (#543) Prevent abuse of these endpoints with rate limiting backed by Redis. The limits assigned should be appropriate for almost any Fleet deployment. Closes #530
2021-03-26 18:23:29 +00:00
github.com/kevinburke/go-bindata v3.22.0+incompatible
Migrate dependencies to go modules (#2094) These changes should be transparent to users and developers. Thanks to @davepgreene who made the first stab at this.
2019-08-13 17:32:23 +00:00
github.com/kolide/kit v0.0.0-20180421083548-36eb8dc43916
github.com/kolide/launcher v0.0.0-20180427153757-cb412b945cf7
Update osquery-go dependency to fix thrift module download problem. (#2105) Fixes #2102
2019-09-13 00:35:10 +00:00
github.com/kolide/osquery-go v0.0.0-20190904034940-a74aa860032d
Merge pull request from GHSA-w3wf-cfx3-6gcx * Update github.com/russellhaering/goxmldsig * Update signature validation to include Mattermost XML validator
2020-12-15 02:14:14 +00:00
github.com/mattermost/xml-roundtrip-validator v0.0.0-20201213122252-bcd7e1b9601e
Issue 1435 software to cpe (#1488) * WIP * WIP * Make path optional and fix tests * Add first generate * Move to nvd package * remove replace * Re-add replace * It's path, not file name * Change how db path is set and use etag * Fix typos * Make db generation faster * Remove quotes * Doesn't like comments * Samitize etag and save to file * Refactor some things and improve writing of etagenv * Compress file and truncate amount of items for faster testing * Remove quotes * Try to improve performance * Ignore truncate error if not exists * Minor cleanup and make sqlite have cpe prefix * Simplify code and test sync * Add VCR for sync test * Check for nvdRelease nil * Add test for the actual translation * Address review comments * Rename generate command because we'll have a cve one too * Move to its own dir * Address review comments
2021-07-29 16:10:34 +00:00
github.com/mattn/go-sqlite3 v1.14.8
Make creating dirs and files more secure by checking permissions (#1566) * Add safe mkdirall and open * Use secure as much as possible and merge gomodules for orbit to fleet * Improve openfile and mkdirall to check for permissiveness instead of equality * Don't shift * Fix links * Address review comments
2021-08-11 14:02:22 +00:00
github.com/mitchellh/gon v0.2.3
Add Redis cluster support (#1045) This should support Redis in both cluster and non-cluster modes. Updates were made separately to github.com/throttled/throttled to support the slight changes in types. Co-authored-by: Joseph Macaulay <joseph.macaulay@uber.com> Co-authored-by: Zach Wasserman <zach@fleetdm.com>
2021-06-18 15:51:47 +00:00
github.com/mna/redisc v1.2.1
Make creating dirs and files more secure by checking permissions (#1566) * Add safe mkdirall and open * Use secure as much as possible and merge gomodules for orbit to fleet * Improve openfile and mkdirall to check for permissiveness instead of equality * Don't shift * Fix links * Address review comments
2021-08-11 14:02:22 +00:00
github.com/oklog/run v1.1.0
Refactor app config (POC, for now) (#1685)
2021-08-20 15:27:41 +00:00
github.com/oleiade/reflections v1.0.1 // indirect
Implement license loading and validation (#908) - Load license from ES256 signed JWT key. - Parse license claims into LicenseInfo struct. - Update contribution documentation with sample license key. Closes #816.
2021-05-31 18:35:15 +00:00
github.com/olekukonko/tablewriter v0.0.5
github.com/open-policy-agent/opa v0.24.0
Improved error handling in host enrollment (#203) This will make it easier to debug issues with the enrollment process, such as #200.
2021-01-19 22:45:58 +00:00
github.com/pkg/errors v0.9.1
Implement license loading and validation (#908) - Load license from ES256 signed JWT key. - Parse license claims into LicenseInfo struct. - Update contribution documentation with sample license key. Closes #816.
2021-05-31 18:35:15 +00:00
github.com/prometheus/client_golang v0.9.3
github.com/prometheus/client_model v0.2.0 // indirect
github.com/prometheus/common v0.4.1 // indirect
github.com/prometheus/procfs v0.2.0 // indirect
github.com/rcrowley/go-metrics v0.0.0-20200313005456-10cdbea86bc0 // indirect
Make creating dirs and files more secure by checking permissions (#1566) * Add safe mkdirall and open * Use secure as much as possible and merge gomodules for orbit to fleet * Improve openfile and mkdirall to check for permissiveness instead of equality * Don't shift * Fix links * Address review comments
2021-08-11 14:02:22 +00:00
github.com/rs/zerolog v1.20.0
Merge pull request from GHSA-w3wf-cfx3-6gcx * Update github.com/russellhaering/goxmldsig * Update signature validation to include Mattermost XML validator
2020-12-15 02:14:14 +00:00
github.com/russellhaering/goxmldsig v1.1.0
Upgrade fleetctl github.com/urfave/cli to v2 (#471) This is intended to upgrade to the new API without changing fleetctl functionality.
2021-03-13 00:42:38 +00:00
github.com/russross/blackfriday/v2 v2.1.0 // indirect
Merge branch 'main' into teams
2021-06-18 16:42:20 +00:00
github.com/spf13/cast v1.3.1
Make creating dirs and files more secure by checking permissions (#1566) * Add safe mkdirall and open * Use secure as much as possible and merge gomodules for orbit to fleet * Improve openfile and mkdirall to check for permissiveness instead of equality * Don't shift * Fix links * Address review comments
2021-08-11 14:02:22 +00:00
github.com/spf13/cobra v1.1.1
Merge branch 'main' into teams
2021-06-18 16:42:20 +00:00
github.com/spf13/viper v1.8.0
Implement license loading and validation (#908) - Load license from ES256 signed JWT key. - Parse license claims into LicenseInfo struct. - Update contribution documentation with sample license key. Closes #816.
2021-05-31 18:35:15 +00:00
github.com/stretchr/testify v1.7.0
Initial implementation of agent update management (#516) This PR contains the initial implementation of the fleetctl updates commands, along with documentation on using this to self-host an agent update server. Co-authored-by: Noah Talerman <noahtal@umich.edu> Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2021-03-26 17:46:51 +00:00
github.com/theupdateframework/go-tuf v0.0.0-20201230183259-aee6270feb55
Add Redis cluster support (#1045) This should support Redis in both cluster and non-cluster modes. Updates were made separately to github.com/throttled/throttled to support the slight changes in types. Co-authored-by: Joseph Macaulay <joseph.macaulay@uber.com> Co-authored-by: Zach Wasserman <zach@fleetdm.com>
2021-06-18 15:51:47 +00:00
github.com/throttled/throttled/v2 v2.8.0
Upgrade fleetctl github.com/urfave/cli to v2 (#471) This is intended to upgrade to the new API without changing fleetctl functionality.
2021-03-13 00:42:38 +00:00
github.com/urfave/cli/v2 v2.3.0
Implement license loading and validation (#908) - Load license from ES256 signed JWT key. - Parse license claims into LicenseInfo struct. - Update contribution documentation with sample license key. Closes #816.
2021-05-31 18:35:15 +00:00
golang.org/x/crypto v0.0.0-20210220033148-5ea612d1eb83
Make creating dirs and files more secure by checking permissions (#1566) * Add safe mkdirall and open * Use secure as much as possible and merge gomodules for orbit to fleet * Improve openfile and mkdirall to check for permissiveness instead of equality * Don't shift * Fix links * Address review comments
2021-08-11 14:02:22 +00:00
golang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c
Process stored CPEs and store found CVEs (#1533) * WIP * WIP * Make path optional and fix tests * Add first generate * Move to nvd package * remove replace * Re-add replace * It's path, not file name * Change how db path is set and use etag * Fix typos * Make db generation faster * Remove quotes * Doesn't like comments * Samitize etag and save to file * Refactor some things and improve writing of etagenv * Compress file and truncate amount of items for faster testing * Remove quotes * Try to improve performance * Ignore truncate error if not exists * Minor cleanup and make sqlite have cpe prefix * Simplify code and test sync * Add VCR for sync test * Check for nvdRelease nil * Add test for the actual translation * Address review comments * Rename generate command because we'll have a cve one too * Move to its own dir * Add first cve db generation * WIP but with final strategy, preparring to merge main * Fix merge conflicts * WIP * wip * Insert CVEs to the db * Remove unused code * Use wg instead of counting * Call cancelFunc to avoid ctx leak * Fix logs for better readability * Point code to fleetdm instead of my repo
2021-08-04 21:01:39 +00:00
golang.org/x/tools v0.1.5 // indirect
Merge branch 'main' into teams
2021-06-18 16:42:20 +00:00
google.golang.org/grpc v1.38.0
Use canonical import path for gopkg.in/guregu/null (#2171) The `gopkg.in` import path is used in the package's documentation, and by downstream Linux distro maintainers (e.g. Debian Go Packaging Team).
2020-01-13 17:11:31 +00:00
gopkg.in/guregu/null.v3 v3.4.0
Migrate dependencies to go modules (#2094) These changes should be transparent to users and developers. Thanks to @davepgreene who made the first stab at this.
2019-08-13 17:32:23 +00:00
gopkg.in/natefinch/lumberjack.v2 v2.0.0-20170531160350-a96e63847dc3
Implement license loading and validation (#908) - Load license from ES256 signed JWT key. - Parse license claims into LicenseInfo struct. - Update contribution documentation with sample license key. Closes #816.
2021-05-31 18:35:15 +00:00
gopkg.in/yaml.v2 v2.4.0
Migrate dependencies to go modules (#2094) These changes should be transparent to users and developers. Thanks to @davepgreene who made the first stab at this.
2019-08-13 17:32:23 +00:00
)
Implement release automation (#1215) - Use goreleaser to automate release process. - Add new dockerfiles for fleet (with fleetctl) and fleetctl (only). - Add GitHub Action Workflow to run goreleaser on new tag. - Update NPM to match new archive naming.
2021-06-26 01:40:26 +00:00
replace github.com/kolide/kit => github.com/zwass/kit v0.0.0-20210625184505-ec5b5c5cce9c
Reference in New Issue Copy Permalink