Commit Graph

3922 Commits

Author SHA1 Message Date
Guillaume Ross
c16ad0d693
Update README.md (#4747)
* Update README.md

Github security link was not pointing to the right place in the security page

* Update README.md

Extra hyphen removed

* Update README.md

Adding file extension BACK.  How many commits will I need to fix a link??
2022-03-22 17:30:13 -04:00
Mike McNeil
d92a777581
Handbook: put Slack channels last (#4668) 2022-03-22 16:23:37 -05:00
Guillaume Ross
e2b0674286
Add GitHub security guide (#4665)
* Adding GitHub security guide

* Update security.md

All edits are recorded by line:
273-275 reworded for clarity.
299 reworded to “Selecting Write provides the perfect balance!”
312 deleted “,” after “discussions”
313 deleted “want to“
317 replaced “into to” with “in too”; deleted “,” after “places”; added hyphen to “security-related”
322 deleted “,” after “configure”
340 replaced “had a need for” with “needed”
345 added “,” after “workflows”

* ccccccujudggihredvcugfctdteubbiteignjjjrfndh

* removedyubisneeze

* Update security.md

I removed the hyphen’s from “open source” in this section. Though the hyphen is correct Mike T. told me it’s a Mike McNeil preference.

All edits are recorded by line:
258 deleted “,” after ”running”
265 replace “as” with “so”; replaced “device” with device's OS “device's OS”
269 replaced “We need to host and collaborate on code as a company making open-source software!” with “Since Fleet makes open source software, we need to host and collaborate on code.”
273 deleted “-“ from “open source’
287 replaced “was” with “were”
290 deleted “:” after “enable”; added italics to “Require two-factor authentication”
293 removed”-“ from “open source”; added “If you can imagine,”
309 added italics to “Write”
326 deleted”,” after “discussions”

* Update security.md

Added a link in the macOS section to point to a blog post on the topic, and finished GitHub security section draft.

* Update security.md

Fixed broken italic

* Update security.md

All edits are recorded by line:
261 deleted “,” after “default”; added “the” before “performance”
262 added “from having”

* Update security.md

All edits are recorded by line:
270 replaced “,” with “;”
274 added “,” after “source”
311 deleted “.” after “creation”; added “,” after “eventually”
313 replaced “be sure” with “ensure”; added “,” after “handbook”
321 added “,” after “example”
327 replaced “it” with “them”
346 added “a pull request”
348 added “a” before “linear”
351 replaced “We have need this” with “We do not have a need this”
377 deleted”,” after “actions”
378 added “,” after “privileges”
384 added “,” after “repositories”

* Update security.md

Made Dependabot explanation clearer

* Update security.md

Removed an extra `that`

* Update security.md

It's dependa*b*ot not dependaot!

Co-authored-by: Desmi-Dizney <99777687+Desmi-Dizney@users.noreply.github.com>
2022-03-22 17:13:53 -04:00
Lucas Manuel Rodriguez
eeb73a42db
Fleetctl preview to clean up osquery socket before starting orbit (#4729)
* Fleetctl preview to clean up osquery socket before starting orbit

* Use os.Remove
2022-03-22 18:00:00 -03:00
RachelElysia
dc8921fed1
Remove fleet desktop checkbox (#4730) 2022-03-22 11:23:59 -04:00
Kelvin Oghenerhoro Omereshone
67a2d7d702
docs: change verbiage from tutorial to guide (#4727) 2022-03-22 11:52:12 +01:00
gillespi314
2092fe437f
Add tables from macadmins extension to compatibility check (#4722) 2022-03-21 18:06:25 -05:00
Lucas Manuel Rodriguez
4d7c9d19d2
Add missing desktop channel to orbit's Info.plist (#4724) 2022-03-21 19:56:12 -03:00
eashaw
666509e634
Ignore FleetDM GitHub project URLs when checking Markdown links (#4712)
* Add GitHub projects to link check ignorePatterns

* update pattern to exclude private GitHub projects
2022-03-21 17:21:12 -05:00
gillespi314
eb5c9bf7b7
Add advanced installer info to add hosts modal (#4644) 2022-03-21 17:08:13 -05:00
Zach Wasserman
cc687d9d1e
Add Notarization for Fleet Desktop (#4720) 2022-03-21 15:01:50 -07:00
Guillaume Ross
d60ee47545
Securing desktop github workflow (#4718)
Pinning the dependencies and putting an explicit read only permission on the new desktop github workflow
2022-03-21 15:38:21 -04:00
Michal Nicpon
7b671ac2a3
Add team failing policies webhook (#4633)
* add config to teams
* update api docs
* update tests
2022-03-21 13:16:47 -06:00
Lucas Manuel Rodriguez
ecdfd627b6
Fleet Desktop MVP (#4530)
* WIP

* WIP2

* Fix orbit and fleetctl tests

* Amend macos-app default

* Add some fixes

* Use fleetctl updates roots command

* Add more fixes to Updater

* Fixes to app publishing and downloading

* Add more changes to support fleetctl cross generation

* Amend comment

* Add pkg generation to ease testing

* Make more fixes

* Add changes entry

* Add legacy targets (until our TUF system exposes the new app)

* Fix fleetctl preview

* Fix bool flag

* Fix orbit logic for disabled-updates and dev-mode

* Fix TestPreview

* Remove constant and fix zip-slip attack (codeql)

* Return unknown error

* Fix updater's checkExec

* Add support for executable signing in init_tuf.sh

* Try only signing orbit

* Fix init_tuf.sh targets, macos-app only for osqueryd

* Specify GOARCH to support M1s

* Add workflow to generate osqueryd.app.tar.gz

* Use 5.2.2 on init_tuf.sh

* Add unit test for tar.gz target

* Use artifacts instead of releases

* Remove copy paste residue

* Fleet Desktop Packaging WIP

* Ignore gosec warning

* Trigger on PR too

* Install Go in workflow

* Pass url parameter to desktop app

* Fix fleetctl package

* Final set of changes for v1 of Fleet Desktop

* Add changes

* PR fixes

* Fix CI build

* add larger menu bar icon

* Add transparency item

* Delete host_device_auth entry on host deletion

* Add SetTargetChannel

* Update white logo and add desktop to update runner

* Add fleet-desktop monitoring to orbit

* Define fleet-desktop app exec name

* Fix update runner creation

* Add API test before enabling the My device menu item

Co-authored-by: Zach Wasserman <zach@fleetdm.com>
2022-03-21 14:53:53 -03:00
KanchiMoe
e9fd5f46c7
fix uncommented line for code owners (#4669) 2022-03-21 10:50:34 -07:00
RachelElysia
81f5a6c3bd
Remove macadmin call from device user page (#4713) 2022-03-21 13:49:53 -04:00
Zach Wasserman
e2ec9df037
Update systemd example to show running as a non-root user (#4702)
From discussion in https://osquery.slack.com/archives/C01DXJL16D8/p1647507818040759.
2022-03-21 10:49:42 -07:00
Katheryn Satterlee
909c3b6ca6
Add Host OS compatibility chart (#4621)
* Add Host OS compatibility chart for issue 3359

* Refining compatibility for Linux

* Updated wording of Linux note and changed file name to match heading

* Change Windows  version to 10+

* Update Supported-host-operating-systems.md

Edits recorded by line:
5 replaced ":" with "."
17 replaced "in" with "for"
22 added "a" before "CPU"

* Update Supported-host-operating-systems.md

@Desmi-Dizney let me know if that helps at all!

Co-authored-by: Desmi-Dizney <99777687+Desmi-Dizney@users.noreply.github.com>
2022-03-21 12:22:32 -05:00
Zachary Winnerman
92cd700b4d
Add new loadtesting infra and scaledown option to save costs (#4662) 2022-03-21 13:18:21 -04:00
gillespi314
deeaf9d036
Add ability to detect compatibility and update which hosts are checked for a policy (#4703)
Add new usePlatformSelector custom hook
Add new usePlatformCompatibility custom hook
Add new PlatformSelector global component
Refactor PlatformCompatibility as global component
Refactor sql_tools to TypeScript
Improve type definitions for context/policy
Align PolicyPage and QueryPage with platform compatibility changes
2022-03-21 11:51:00 -05:00
RachelElysia
e1f84436ab
Device user cannot view all hosts software (#4710) 2022-03-21 12:34:36 -04:00
Benjamin Edwards
74bb559645
Add public ip to hosts & derive geolocation when rendering host (#4652)
* geoip wip
* return nil if ip is empty string or if ParseIP returns nil
* add ui component to render geolocation if available, address PR feedback
* render public ip if available
* add changes file, document geoip in deployment guide
* update rest-api docs
2022-03-21 12:29:52 -04:00
Tharun Rajendran
1164330bd4
chore(test): rewritten confirm invite form test using rtl (#4616) 2022-03-21 11:27:50 -05:00
Tharun Rajendran
999042ff31
chore(test): rewritten authenticated routes test using rtl (#4617) 2022-03-21 11:27:17 -05:00
Tharun Rajendran
4ca32c7148
chore(test): rewritten emailtokenredirect test using rtl (#4618) 2022-03-21 11:26:40 -05:00
Tharun Rajendran
68572dbd36
chore(test): rewritten app component test using rtl (#4629) 2022-03-21 11:25:54 -05:00
Tharun Rajendran
2edffeebd7
chore(test): rewritten core layout component test using rtl (#4655) 2022-03-21 11:25:08 -05:00
Martavis Parker
aed9e3aa1e
Minimize Redux in pages where possible (#4614)
* removed redux from settings wrapper

* removed redux rooute push from team details

* removed redux route push from user management

* removed redux from forgot password

* removed unused function

* removed redux from login successful page

* removed redux push route from edit pack

* removed use of redux push route from pack composer

* removed use of redux route push from manage queries

* removed use of redux route push from query form

* removed use of redux route push from schedule

* lint fixes

* created sessions service

* removed redux route use from login

* lint fixes

* fixed and removed unnecessary tests
2022-03-21 08:35:24 -07:00
Andrew Baker
06d4950a42
Handbook sponsorship process (#4624)
* Handbook sponsorship process

* Update community.md

Edits recorded by line:
241 added "to" before "expose
242 reworded to make more concise
244 deleted "," after "opportunity"
257 replaced ",." with ","

* Update community.md

* Update community.md

Fixed sentence casing and also added clarity to roles responsible for approving and signing off on sponsorships.

* Update community.md

Edits recorded by line:
244 replaced "has been" with "are"
245 added "."
249 added "."
257 replaced "have been" with "are"

Co-authored-by: Desmi-Dizney <99777687+Desmi-Dizney@users.noreply.github.com>
2022-03-21 10:25:24 -05:00
RachelElysia
84de0b7db0
Fleet Desktop device user page (#4589) 2022-03-21 09:38:59 -04:00
RachelElysia
d661d23956
New/Edit Packs Page: Fix hover of pack's target selector (#4592) 2022-03-18 16:01:29 -04:00
Tharun Rajendran
c16ac4fcc9
chore(test): rewritten clickable table row component test using rtl (#4630) 2022-03-18 14:10:29 -05:00
Tharun Rajendran
cb159970c1
chore(test): rewritten panelgroup component test using rtl (#4628) 2022-03-18 14:10:16 -05:00
Tharun Rajendran
b512eef210
chore(test): rewritten querypagewrapper component test using rtl (#4627) 2022-03-18 14:09:23 -05:00
Tharun Rajendran
54a17b9e97
chore(test): rewritten dropdown component test using rtl (#4626) 2022-03-18 14:08:54 -05:00
Guillaume Ross
befbe88eb8
Adding manual execution to ossf scorecard workflow 2022-03-18 14:36:10 -04:00
Mike McNeil
c8b7ea64bf
Handbook: Mike == DRI of #oooh-automation (#4651) 2022-03-18 12:45:38 -05:00
Kelvin Oghenerhoro Omereshone
8abe592808
Make redirect to via /slack 301 and add support link in docs homepage (#4696)
* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* chore: remove queries from develop

* docs: add query to get running docker containers

* docs: add query to get machines with unencrypted primary disks

* fix: remove trailing ---

* fix: remove trailing ---

* chore: remove trailing ---

* docs: add query to get applications hogging memory

* fix: resolve merge conflicts

* chore: update PR

* chore: update PR

* chore: merge previous query

* feat: add query to find servers with root logins within the day

* fix: remove unneeded period

* docs: add instructions for submiting multiple queries

* fix: remove duplicate entry

* fix: remove period from get running docker containers query description

* docs: add instructions for submiting multiple queries

* fix: resolve merge conflicts

* feat: add description for query to fetch failing batteries

* fix: resolve duplicate descriptions

* fix: remove typo in deplying docs

* fix: reword description

* fix: add suggestions to improve description

* feat: add description to query to fet windows machines with unencrypted hard disks

* feat: update description for count apple applications installed query

* chore: add dominuskelvin as maintainer

* docs: 📝 Add query to get apps opened within the last 24 hours

* feat: add query to find apps not in Applications directory

* feat: add query to find subscription based applications that have not been opened for the last 30 days

* feat: add link to signing installers

* fix: typo with link to the getting started page

* feat: docs on how to sign an osquery installer

* feat: make signing installer a subsection of osquery installer

* feat: make description for signing installer shorter and compact

* fix: change package to installers

* fix: reword note section

* feat: add instructions to use credentials below to log in to fleet preview

* feat: update static pages explicitly listed in sitemap

* feat:  change the fleetdm.com/docs landing page to send folks clicking for support to fleetdm.com/slack instead of to the contact formadd testimonial section

* feat: add a 301 redirect

* feat: update docs landing page to link to slack instead of support form
2022-03-18 12:30:28 -05:00
Mike McNeil
60620b840b
Handbook: Please use sentence case (#4690) 2022-03-18 11:54:14 -05:00
Zach Wasserman
efbc2b92bb
Fix race condition in updates test (#4661)
Copy the DefaultOptions in order to prevent a data race on the Targets
map. This race should only have effected testing.

Race detector output:

```
WARNING: DATA RACE
Read at 0x00c0000908d0 by goroutine 15:
  runtime.mapaccess1_faststr()
      /opt/hostedtoolcache/go/1.18.0/x64/src/runtime/map_faststr.go:13 +0x0
  github.com/fleetdm/fleet/v4/orbit/pkg/update.TestMakeRepoPath.func1()
      /home/runner/work/fleet/fleet/orbit/pkg/update/update_test.go:58 +0xb6
  testing.tRunner()
      /opt/hostedtoolcache/go/1.18.0/x64/src/testing/testing.go:1439 +0x213
  testing.(*T).Run.func1()
      /opt/hostedtoolcache/go/1.18.0/x64/src/testing/testing.go:1486 +0x47

Previous write at 0x00c0000908d0 by goroutine 12:
  runtime.mapassign_faststr()
      /opt/hostedtoolcache/go/1.18.0/x64/src/runtime/map_faststr.go:203 +0x0
  github.com/fleetdm/fleet/v4/orbit/pkg/update.TestMakeRepoPath.func1()
      /home/runner/work/fleet/fleet/orbit/pkg/update/update_test.go:62 +0x1cb
  testing.tRunner()
      /opt/hostedtoolcache/go/1.18.0/x64/src/testing/testing.go:1439 +0x213
  testing.(*T).Run.func1()
      /opt/hostedtoolcache/go/1.18.0/x64/src/testing/testing.go:1486 +0x47

Goroutine 15 (running) created at:
  testing.(*T).Run()
      /opt/hostedtoolcache/go/1.18.0/x64/src/testing/testing.go:1486 +0x724
  github.com/fleetdm/fleet/v4/orbit/pkg/update.TestMakeRepoPath()
      /home/runner/work/fleet/fleet/orbit/pkg/update/update_test.go:53 +0x1a4
  testing.tRunner()
      /opt/hostedtoolcache/go/1.18.0/x64/src/testing/testing.go:1439 +0x213
  testing.(*T).Run.func1()
      /opt/hostedtoolcache/go/1.18.0/x64/src/testing/testing.go:1486 +0x47

Goroutine 12 (running) created at:
  testing.(*T).Run()
      /opt/hostedtoolcache/go/1.18.0/x64/src/testing/testing.go:1486 +0x724
  github.com/fleetdm/fleet/v4/orbit/pkg/update.TestMakeRepoPath()
      /home/runner/work/fleet/fleet/orbit/pkg/update/update_test.go:53 +0x1a4
  testing.tRunner()
      /opt/hostedtoolcache/go/1.18.0/x64/src/testing/testing.go:1439 +0x213
  testing.(*T).Run.func1()
      /opt/hostedtoolcache/go/1.18.0/x64/src/testing/testing.go:1486
      +0x47
 ```
2022-03-18 09:30:45 -07:00
Mike McNeil
0b4b059e26
handbook: add #g-security slack channel (#4683) 2022-03-18 09:01:06 -04:00
Kelvin Oghenerhoro Omereshone
44aed81e31
Website update static pages being explicitly listed in dynamic sitemapxml (#4681)
* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* feat: add query to find running docker containers

* docs: 📝 add query to get Mac and Linux machines with unencrypted primary disks

* chore: remove queries from develop

* docs: add query to get running docker containers

* docs: add query to get machines with unencrypted primary disks

* fix: remove trailing ---

* fix: remove trailing ---

* chore: remove trailing ---

* docs: add query to get applications hogging memory

* fix: resolve merge conflicts

* chore: update PR

* chore: update PR

* chore: merge previous query

* feat: add query to find servers with root logins within the day

* fix: remove unneeded period

* docs: add instructions for submiting multiple queries

* fix: remove duplicate entry

* fix: remove period from get running docker containers query description

* docs: add instructions for submiting multiple queries

* fix: resolve merge conflicts

* feat: add description for query to fetch failing batteries

* fix: resolve duplicate descriptions

* fix: remove typo in deplying docs

* fix: reword description

* fix: add suggestions to improve description

* feat: add description to query to fet windows machines with unencrypted hard disks

* feat: update description for count apple applications installed query

* chore: add dominuskelvin as maintainer

* docs: 📝 Add query to get apps opened within the last 24 hours

* feat: add query to find apps not in Applications directory

* feat: add query to find subscription based applications that have not been opened for the last 30 days

* feat: add link to signing installers

* fix: typo with link to the getting started page

* feat: docs on how to sign an osquery installer

* feat: make signing installer a subsection of osquery installer

* feat: make description for signing installer shorter and compact

* fix: change package to installers

* fix: reword note section

* feat: add instructions to use credentials below to log in to fleet preview

* feat: update static pages explicitly listed in sitemap
2022-03-18 07:07:42 -05:00
Kelvin Oghenerhoro Omereshone
68fd975eef
feat: update Fleet slack links (#4684) 2022-03-18 06:49:21 -05:00
Zachary Winnerman
0f5e43bc7b
Add name to receive-from-github.js (#4578) 2022-03-17 16:29:21 -07:00
Martavis Parker
4646dd2613
fixed tooltip for pack queries table (#4647) 2022-03-17 11:49:25 -07:00
Mike Thomas
7af5f3bcbd
Live Q&A update (#4660)
Updated the date for next live Q&A session.
2022-03-17 17:51:08 +00:00
eashaw
adcd380fd4
Update Slack redirect (#4658) 2022-03-17 11:42:12 -05:00
Guillaume Ross
32ad77c22e
Create dependabot.yml (#4558)
Part of #4198
2022-03-16 16:00:22 -04:00
Guillaume Ross
62d3b9145f
4620 pin action dependencies (#4622)
* Update build-binaries.yaml

Pin action versions + add read only token to build-binaries.yaml

* Update codeql-analysis.yml

Pin dependencies with hash for codeql-analysis.yml

* Update deploy-fleet-website.yml

Pin dependencies in deploy-fleet-website.yml

* Update docs.yml

Pin dependencies for docs.yml

* Update fleet-and-orbit.yml

Pinning dependencies for fleet-and-orbit.yml

* Update generate-osqueryd-app-tar-gz.yml

Pin dependencies for generate-osqueryd-app-tar-gz.yml

* Pin dependencies in goreleaser workflows

Pinned dependencies in the 3 goreleaser workflows

* Update integration.yml

Pinned dependencies with hash

* Update pr-helm.yaml

Pinned dependencies with hash

* Update push-osquery-perf-to-ecr.yml

Pinned dependencies with a hash

* Update release-helm.yaml

Pinned one dependency with a hash

* Update semgrep-analysis.yml

Pinned dependencies with hashes

* Update test-go.yaml

Pinned dependencies with hash

* Update test-packaging.yml

Pinned dependencies with hashes

* Update test-website.yml

Pinned dependencies with hashes

* Update test.yml

Pinned dependencies with hashes
2022-03-16 15:42:28 -04:00
Guillaume Ross
8700fc6498
Go 1.17.8 (#4560)
* Go 1.17.8

* Enforcing go minimum 1.17.8

Bumping minimum version in a few more files
2022-03-16 14:56:58 -04:00