mirror of
https://github.com/empayre/fleet.git
synced 2024-11-06 08:55:24 +00:00
ae6c387059
- Fix many vulnerability false positives on Chrome and Firefox extensions. This is related to #11924 and also related to the following 5 false positives found in dogfood around Chrome extensions. - Reduced `TestTranslateCPEToCVE` run time considerably: ``` --- PASS: TestTranslateCPEToCVE (8.59s) --- PASS: TestTranslateCPEToCVE/find_vulns_on_cpes (38.45s) --- PASS: TestTranslateCPEToCVE/recent_vulns (62.03s) vs. === RUN TestTranslateCPEToCVE/recent_vulns === NAME TestTranslateCPEToCVE nettest.go:36: network test done: TestTranslateCPEToCVE --- PASS: TestTranslateCPEToCVE (269.86s) --- PASS: TestTranslateCPEToCVE/cpe:2.3🅰️1password:1password:3.9.9:*:*:*:*:macos:*:* (31.31s) --- PASS: TestTranslateCPEToCVE/cpe:2.3🅰️1password:1password:3.9.9:*:*:*:*:*:*:* (29.00s) --- PASS: TestTranslateCPEToCVE/cpe:2.3🅰️pypa:pip:9.0.3:*:*:*:*:python:*:* (52.59s) --- PASS: TestTranslateCPEToCVE/cpe:2.3🅰️mozilla:firefox:93.0:*:*:*:*:windows:*:* (34.29s) --- PASS: TestTranslateCPEToCVE/cpe:2.3🅰️mozilla:firefox:93.0.100:*:*:*:*:windows:*:* (28.17s) --- PASS: TestTranslateCPEToCVE/cpe:2.3🅰️apple:icloud:1.0:*:*:*:*:macos:*:* (28.44s) --- PASS: TestTranslateCPEToCVE/recent_vulns (56.95s) ``` ![Screenshot 2023-10-30 at 09 34 25](https://github.com/fleetdm/fleet/assets/2073526/30ff798d-362d-4df4-876e-53619d2d8802) ![Screenshot 2023-10-30 at 09 34 35](https://github.com/fleetdm/fleet/assets/2073526/ae65583f-26d3-403a-93e3-39c1393bc471) ![Screenshot 2023-10-30 at 09 34 47](https://github.com/fleetdm/fleet/assets/2073526/aba99efe-b744-4f05-927c-981c490fc02f) ![Screenshot 2023-10-30 at 09 35 41](https://github.com/fleetdm/fleet/assets/2073526/aaff0725-ceca-494e-b64f-c30ff5e63aec) <img width="868" alt="Screenshot 2023-10-30 at 10 21 42" src="https://github.com/fleetdm/fleet/assets/2073526/284a2373-09bc-44f7-952b-1e53650232ff"> - [X] Changes file added for user-visible changes in `changes/` or `orbit/changes/`. See [Changes files](https://fleetdm.com/docs/contributing/committing-changes#changes-files) for more information. - ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or docs/Contributing/API-for-contributors.md)~ - ~[ ] Documented any permissions changes (docs/Using Fleet/manage-access.md)~ - ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL injection is prevented (using placeholders for values in statements)~ - ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for new osquery data ingestion features.~ - [X] Added/updated tests - [X] Manual QA for all new/changed functionality - ~For Orbit and Fleet Desktop changes:~ - ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows and Linux.~ - ~[ ] Auto-update manual QA, from released version of component to new version (see [tools/tuf/test](../tools/tuf/test/README.md)).~ |
||
---|---|---|
.. | ||
api | ||
app | ||
backup_db | ||
blackhat-mdm | ||
bomutils-docker | ||
ci | ||
dbutils | ||
desktop | ||
file-server | ||
fleet-docker | ||
fleetctl-docker | ||
fleetctl-npm | ||
inspect-cert | ||
installerstore | ||
jira-integration | ||
kubequery | ||
loadtest | ||
mailpit | ||
mdm | ||
mysql-replica-testing | ||
nvdvuln | ||
osquery | ||
osquery-agent-options | ||
osquery-testing | ||
redis-stress | ||
redis-tests | ||
run-scripts | ||
saml | ||
team-builder | ||
telemetry | ||
test_extensions/hello_world | ||
test-orbit-mtls | ||
testdata | ||
tuf | ||
windows-mdm-enroll | ||
wix-docker | ||
zendesk-integration |