Commit Graph

11307 Commits

Author SHA1 Message Date
Noah Talerman
8f24649a08
In dogfood, collect expiration for MDM SCEP certificates (#17848)
- Add query that runs every 5 minutes to the workstations team
- Plan is to remove the query after the issue tracking renewing all SCEP
certs is closed: https://github.com/fleetdm/confidential/issues/4518
2024-03-26 12:18:13 -04:00
Noah Talerman
4271ca7fd6
Update rest-api.md (#17794)
- Clarify that hostnames are fully qualified domain names (FQDNs). FQDN
= hostname + domain.

For the following issue: #16895
2024-03-26 11:16:28 -05:00
dependabot[bot]
acb7959649
Bump express from 4.17.3 to 4.19.2 (#17857) 2024-03-26 10:07:50 -05:00
Gabriel Hernandez
a292e704de
add startup assistant to the UI (#17731)
relates to #9147

add the setup assistant page to the UI. This includes:

- new setup assistant page
- uploaded profile and release device manually form
- preview for setup assistant flow

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Martin Angers <martin.n.angers@gmail.com>
2024-03-26 14:46:33 +00:00
Sharon Katz
b44848eeba
Updating changelog for 4.47.2 (#17804) 2024-03-26 09:18:34 -05:00
RachelElysia
6d965426e0
Fleet UI: Users can see a tooltip on a disabled checkbox (#17664) 2024-03-26 09:55:49 -04:00
Roberto Dip
f0ad942a57
implement status reports for DDM commands (#17831)
for #17408
2024-03-26 10:40:35 -03:00
Martin Angers
8253e77264
Enable release device: copy global settings to new teams created via puppet (#17842) 2024-03-26 08:15:57 -04:00
Eric
da32121f00
Vuln dashboard: Update moment dependency to resolve code scanning alerts (#17849)
Related to: #17764

Changes:
- Updated ee/vulnerability-dashboard/assets/dependencies/moment.js to
resolve two code scanning alerts.
2024-03-25 18:02:27 -05:00
Jacob Shandling
3d46b0d22a
UI – Fix error state and alignment on global host status webhook setting page (#17821)
## Addresses #17534 

<img width="1392" alt="Screenshot 2024-03-22 at 4 41 25 PM"
src="https://github.com/fleetdm/fleet/assets/61553566/a6bff506-4e1d-4342-be34-890a7742c760">

- also fix bug in alignment of error states vs tooltip-wrapped labels
throughout org settings

- [x] Changes file added
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-03-25 13:41:35 -07:00
Roberto Dip
44727ace3b
fix issues with ddm CLI (#17826)
for #17404. I couldn't find tests for this portion of the code, so full
tests for this section will need to be added during freeze.
2024-03-25 17:36:26 -03:00
Roberto Dip
95df7e2b0b
implement DDM cron and protocol bits (#17791)
for #17399
2024-03-25 17:32:27 -03:00
Gabriel Hernandez
d3c843801e
update UI to add support for mac ddm profiles (#17730)
relates to #17416

update UI to support new DDM profile types. this includes:

- updating Custom settings page
- updating the os settings modal  

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-03-25 19:15:33 +00:00
Eric
b3d77c75e9
Website: update Vanta integration script (#17833)
Related to: #17699

Changes:
- Updated the `send-data-to-vanta` script to retry requests to Vanta's
`https://api.vanta.com/oauth/token` API endpoint that return a `504`
response.
2024-03-25 13:41:17 -05:00
Eric
632af6635d
Handbook: update startedOn date of auto-issue rituals. (#17835)
Changes:
- updated the `startedOn` date of 3 rituals with auto-issue enabled.
2024-03-25 13:37:31 -05:00
Martin Angers
994040b1c9
Send DeviceConfigured MDM command after DEP enrollment (#17737) 2024-03-25 13:25:29 -04:00
Dante Catalfamo
ee14a26df4
Return correct OS details for Windows Server 2019 (#17760) 2024-03-25 10:06:36 -04:00
Noah Talerman
a0e3407f21
Update rest-api.md (#17801)
- Fix anchor link
2024-03-25 09:41:12 -04:00
Gabriel Hernandez
8d2deb37e5 Merge branch 'main' into feat-prefill-account-name 2024-03-25 11:38:20 +00:00
Gabriel Hernandez
577d5c27ea Merge branch 'main' into feat-macos-ddm 2024-03-25 11:11:40 +00:00
Sam Pfluger
04d4cbd647
Add "Archive a document" responsibility (#17824) 2024-03-23 15:39:46 -05:00
Eric
6145877c49
Website: Update logo carousel animation (#17820)
Closes: #17823

Changes:
- Updated the animation of the logo carousel on the homepage.
2024-03-23 11:56:27 -05:00
Eric
776ea4d7fd
Website: Update order of columns on osquery schema table pages. (#17818)
Related to: #17727
Changes:
- Updated the `build-static-content` script to sort the columns of
tables alphabetically by the name of the column when the pages for
fleetdm.com/tables are generated.
2024-03-22 19:36:06 -05:00
Eric
6ae3880704
Website: Update build script to exclude folders with an underscore prefix & rename docs/Deploy/kubernetes/ (#17817)
Closes: #17582

Changes:
- Updated the `build-static-content` script to not generate HTML pages
for files in subfolders that are prefixed with an underscore
- Renamed the `docs/Deploy/kubernetes` folder »
`docs/Deploy/_kubernetes`
- Documented this new behavior on the communications page of the
handbook.
- Updated commands on the Deploy Fleet on Kubernetes page.

---------

Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2024-03-22 18:15:01 -05:00
StepSecurity Bot
80335d88d1
[StepSecurity] Apply security best practices (#17811) 2024-03-22 16:19:11 -05:00
Luke Heath
6ebc308eb4
[StepSecurity] ci: Harden GitHub Actions (#17780) 2024-03-22 15:32:23 -05:00
Luke Heath
b6ab842db2
Add EMs to engineering workflows codeowners (#17808) 2024-03-22 15:32:09 -05:00
RachelElysia
d5df23964b
Fleet UI: Clickable elements include cursor hover state (#17688) 2024-03-22 15:26:09 -04:00
RachelElysia
644dddce4f
[released bug] Fleet UI: standard query library platforms render prop… (#17712) 2024-03-22 15:12:19 -04:00
Luke Heath
b5a81f93d9
Add myself as codeowner to all engineering workflows (#17800) 2024-03-22 12:29:07 -05:00
Eric
413107b93a
Vuln dashboard: Update Okta SSO hook (#17773)
Closes: #17772
More context:
https://github.com/fleetdm/fleet/pull/17601#issuecomment-2013383611

Changes: 
- Updated the order of the vulnerability dashboard's HTTP middleware if
Okta SSO is enabled.
2024-03-22 12:01:15 -05:00
Eric
0d8b51a5b3
Website: Remove /upgrade page. (#17754)
Closes: #17477

Changes:
 - Removed the /upgrade page
 - Added a redirect: `/upgrade` » `/pricing`
2024-03-22 11:54:23 -05:00
Noah Talerman
6b28474362
Update product design handbook (#17790)
- Only notify channel if there are changes. Why? Less noise
2024-03-22 11:51:03 -05:00
Nathanael Holliday
2fe01741df
Update security-policies.md (#17648)
Replaced zwass with JoStableford and updated effective dates for the new
DRIs
2024-03-22 11:49:35 -05:00
Sarah Gillespie
60ba78fc9d
Additional backend support for DDM profiles (#17775) 2024-03-22 10:37:43 -05:00
Sam Pfluger
4246d25914
Update custom.js (#17795) 2024-03-22 10:32:18 -05:00
Marko Lisica
a71e4c7d92
Typo: "removing" /past from host's activities API (#16871)
Typo: "removing" /past from host's activities API

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-03-22 11:42:11 +01:00
Noah Talerman
3c33e83085
Update standard-query-library.yml (#17782)
- Policy's fail when they return no results
2024-03-21 18:48:56 -04:00
Noah Talerman
7ae21d2fda
Update macos-device-health.policies.yml (#17785)
- Add 1Password recovery kit policy
2024-03-21 18:38:05 -04:00
Eric
92771a629e
Website: Update build-static-content script to ignore pages in the docs/contributing/ folder. (#17706)
Closes: #17667

Changes:
- Updated `build-static-content` to skip pages in the docs/contributing
folder when Markdown pages are converted to HTML partials.
2024-03-21 17:26:35 -05:00
Eric
a9b5619d1c
Website: Update number of hosts input on /contact page (#17784)
Closes: https://github.com/fleetdm/confidential/issues/5826

Changes:
- Added a minimum to the number of hosts input on the /contact page
2024-03-21 17:16:22 -05:00
Noah Talerman
ceddd26a73
Update macos-device-health.policies.yml (#17783)
- Fix guest account and password policies
2024-03-21 17:57:21 -04:00
Eric
1d8e208c32
Vulnerability dashboard: Add a way to start a local vulnerability dashboard with Docker (#17676)
Related to: https://github.com/fleetdm/confidential/issues/5637

Changes:
- Added a way to start a vulnerability dashboard with Docker.
- Updated the folder readme to include instructions for starting the
vulnerability dashboard with docker
2024-03-21 16:31:20 -05:00
Eric
4aa854b9d4
Website: Update footer height. (#17781)
Closes: #17778

Changes:
- Updated the styles for pages with reduced footer links
2024-03-21 16:24:09 -05:00
Luke Heath
38ea8db7cd
Set GitHub workflow DRIs (#17777) 2024-03-21 16:04:53 -05:00
dependabot[bot]
424d7e576a
Bump webpack-dev-middleware from 6.1.1 to 6.1.2 (#17776) 2024-03-21 16:02:13 -05:00
StepSecurity Bot
8ae24ac4a9
[StepSecurity] ci: Harden GitHub Actions (#17767)
## Summary

This pull request is created by
[StepSecurity](https://app.stepsecurity.io/securerepo) at the request of
@lukeheath. Please merge the Pull Request to incorporate the requested
changes. Please tag @lukeheath on your message if you have any questions
related to the PR.
## Security Fixes

### Least Privileged GitHub Actions Token Permissions

The GITHUB_TOKEN is an automatically generated secret to make
authenticated calls to the GitHub API. GitHub recommends setting minimum
token permissions for the GITHUB_TOKEN.

- [GitHub Security
Guide](https://docs.github.com/en/actions/security-guides/automatic-token-authentication#using-the-github_token-in-a-workflow)
- [The Open Source Security Foundation (OpenSSF) Security
Guide](https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions)
### Pinned Dependencies

GitHub Action tags and Docker tags are mutable. This poses a security
risk. GitHub's Security Hardening guide recommends pinning actions to
full length commit.

- [GitHub Security
Guide](https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions)
- [The Open Source Security Foundation (OpenSSF) Security
Guide](https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies)


## Feedback
For bug reports, feature requests, and general feedback; please email
support@stepsecurity.io. To create such PRs, please visit
https://app.stepsecurity.io/securerepo.


Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
2024-03-21 15:56:42 -05:00
Nathanael Holliday
43432f0835
Adding vendor process to handbook (#17554)
For reference: https://github.com/fleetdm/confidential/issues/5719

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-03-21 15:56:12 -05:00
Rachael Shaw
44c3ba83e5
Reduce CIS benchmark documentation page contents (#17108)
+ Move specific CIS benchmark details into READMEs
+ Reduce content in Using Fleet > CIS Benchmarks

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2024-03-21 15:03:14 -05:00
Noah Talerman
1bb81c9e10
Update rest-api.md (#17686)
- Remove note about fleetd 
- Update note about MDM being turned on
2024-03-21 15:44:23 -04:00