Skip to content

Commit 0334d8b

Browse files
allenhouchinsallenhouchins
committed
Add fleet apps, labels, and patch policies
Add multiple Fleet-maintained apps to workstations (macOS and x86 Windows), create dynamic labels to detect installed apps, and add patch policies to flag out-of-date installs. workstations.yml: add numerous macOS self-service entries (e.g. GitHub Desktop, Postman, iTerm2, Sublime Text, Figma, Spotify, Google Drive, Cursor, etc.) and x86 Windows entries with labels_include_any for x86 hosts. lib/all/labels/...: add dynamic macOS labels using bundle identifiers and x86 Windows labels using program name plus arch checks. lib/macos/policies/... and lib/windows/policies/...: add patch policies for each new app to notify about outdated versions and provide remediation guidance (Self-service or app update/uninstall). These changes enable inventory, self-service deployment, and patch management for additional developer and productivity applications.
1 parent 83a886b commit 0334d8b

5 files changed

Lines changed: 492 additions & 0 deletions

File tree

‎it-and-security/fleets/workstations.yml‎

Lines changed: 128 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -310,6 +310,86 @@ software:
310310
setup_experience: true
311311
categories:
312312
- Productivity
313+
- slug: github/darwin # GitHub Desktop for macOS
314+
self_service: true
315+
categories:
316+
- Developer tools
317+
- slug: utm/darwin # UTM for macOS
318+
self_service: true
319+
categories:
320+
- Productivity
321+
- slug: imazing-profile-editor/darwin # iMazing Profile Editor for macOS
322+
self_service: true
323+
categories:
324+
- Developer tools
325+
- slug: postman/darwin # Postman for macOS
326+
self_service: true
327+
categories:
328+
- Developer tools
329+
- slug: grammarly-desktop/darwin # Grammarly Desktop for macOS
330+
self_service: true
331+
categories:
332+
- Productivity
333+
- slug: iterm2/darwin # iTerm2 for macOS
334+
self_service: true
335+
categories:
336+
- Developer tools
337+
- slug: sublime-text/darwin # Sublime Text for macOS
338+
self_service: true
339+
categories:
340+
- Developer tools
341+
- slug: parallels/darwin # Parallels Desktop for macOS
342+
self_service: true
343+
categories:
344+
- Productivity
345+
- slug: loom/darwin # Loom for macOS
346+
self_service: true
347+
categories:
348+
- Productivity
349+
- slug: spotify/darwin # Spotify for macOS
350+
self_service: true
351+
categories:
352+
- Productivity
353+
- slug: rectangle/darwin # Rectangle for macOS
354+
self_service: true
355+
categories:
356+
- Productivity
357+
- slug: logi-options+/darwin # Logi Options+ for macOS
358+
self_service: true
359+
categories:
360+
- Productivity
361+
- slug: suspicious-package/darwin # Suspicious Package for macOS
362+
self_service: true
363+
categories:
364+
- Developer tools
365+
- slug: figma/darwin # Figma for macOS
366+
self_service: true
367+
categories:
368+
- Productivity
369+
- slug: whatsapp/darwin # WhatsApp for macOS
370+
self_service: true
371+
categories:
372+
- Communication
373+
- slug: android-studio/darwin # Android Studio for macOS
374+
self_service: true
375+
categories:
376+
- Developer tools
377+
- slug: zed/darwin # Zed for macOS
378+
self_service: true
379+
categories:
380+
- Developer tools
381+
- slug: obsidian/darwin # Obsidian for macOS
382+
self_service: true
383+
categories:
384+
- Productivity
385+
- slug: google-drive/darwin # Google Drive for macOS
386+
self_service: true
387+
categories:
388+
- Productivity
389+
- slug: cursor/darwin # Cursor for macOS
390+
self_service: true
391+
categories:
392+
- Developer tools
313393
# Windows apps
314394
- slug: slack/windows # Slack for Windows
315395
self_service: true
@@ -353,3 +433,51 @@ software:
353433
self_service: true
354434
categories:
355435
- Developer tools
436+
- slug: docker/windows # Docker Desktop for Windows (x86)
437+
self_service: true
438+
categories:
439+
- Developer tools
440+
labels_include_any:
441+
- "x86-based Windows hosts"
442+
- slug: github-desktop/windows # GitHub Desktop for Windows (x86)
443+
self_service: true
444+
categories:
445+
- Developer tools
446+
labels_include_any:
447+
- "x86-based Windows hosts"
448+
- slug: postman/windows # Postman for Windows (x86)
449+
self_service: true
450+
categories:
451+
- Developer tools
452+
labels_include_any:
453+
- "x86-based Windows hosts"
454+
- slug: sublime-text/windows # Sublime Text for Windows (x86)
455+
self_service: true
456+
categories:
457+
- Developer tools
458+
labels_include_any:
459+
- "x86-based Windows hosts"
460+
- slug: spotify/windows # Spotify for Windows (x86)
461+
self_service: true
462+
categories:
463+
- Productivity
464+
labels_include_any:
465+
- "x86-based Windows hosts"
466+
- slug: figma/windows # Figma for Windows (x86)
467+
self_service: true
468+
categories:
469+
- Productivity
470+
labels_include_any:
471+
- "x86-based Windows hosts"
472+
- slug: google-drive/windows # Google Drive for Windows (x86)
473+
self_service: true
474+
categories:
475+
- Productivity
476+
labels_include_any:
477+
- "x86-based Windows hosts"
478+
- slug: cursor/windows # Cursor for Windows (x86)
479+
self_service: true
480+
categories:
481+
- Developer tools
482+
labels_include_any:
483+
- "x86-based Windows hosts"

‎it-and-security/lib/all/labels/macs-with-fleet-maintained-apps-installed.yml‎

Lines changed: 100 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -58,3 +58,103 @@
5858
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.amazonaws.acvc.osx';
5959
label_membership_type: dynamic
6060
platform: darwin
61+
- name: Macs with GitHub Desktop installed
62+
description: macOS hosts with GitHub Desktop installed
63+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.github.GitHubClient';
64+
label_membership_type: dynamic
65+
platform: darwin
66+
- name: Macs with UTM installed
67+
description: macOS hosts with UTM installed
68+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.utmapp.UTM';
69+
label_membership_type: dynamic
70+
platform: darwin
71+
- name: Macs with iMazing Profile Editor installed
72+
description: macOS hosts with iMazing Profile Editor installed
73+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.DigiDNA.iMazingProfileEditorMac';
74+
label_membership_type: dynamic
75+
platform: darwin
76+
- name: Macs with Postman installed
77+
description: macOS hosts with Postman installed
78+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.postmanlabs.mac';
79+
label_membership_type: dynamic
80+
platform: darwin
81+
- name: Macs with Grammarly Desktop installed
82+
description: macOS hosts with Grammarly Desktop installed
83+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.grammarly.ProjectLlama';
84+
label_membership_type: dynamic
85+
platform: darwin
86+
- name: Macs with iTerm2 installed
87+
description: macOS hosts with iTerm2 installed
88+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.googlecode.iterm2';
89+
label_membership_type: dynamic
90+
platform: darwin
91+
- name: Macs with Sublime Text installed
92+
description: macOS hosts with Sublime Text installed
93+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.sublimetext.4';
94+
label_membership_type: dynamic
95+
platform: darwin
96+
- name: Macs with Parallels Desktop installed
97+
description: macOS hosts with Parallels Desktop installed
98+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.parallels.desktop.console';
99+
label_membership_type: dynamic
100+
platform: darwin
101+
- name: Macs with Loom installed
102+
description: macOS hosts with Loom installed
103+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.loom.desktop';
104+
label_membership_type: dynamic
105+
platform: darwin
106+
- name: Macs with Spotify installed
107+
description: macOS hosts with Spotify installed
108+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.spotify.client';
109+
label_membership_type: dynamic
110+
platform: darwin
111+
- name: Macs with Rectangle installed
112+
description: macOS hosts with Rectangle installed
113+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.knollsoft.Rectangle';
114+
label_membership_type: dynamic
115+
platform: darwin
116+
- name: Macs with Logi Options+ installed
117+
description: macOS hosts with Logi Options+ installed
118+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.logi.optionsplus';
119+
label_membership_type: dynamic
120+
platform: darwin
121+
- name: Macs with Suspicious Package installed
122+
description: macOS hosts with Suspicious Package installed
123+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.mothersruin.SuspiciousPackage';
124+
label_membership_type: dynamic
125+
platform: darwin
126+
- name: Macs with Figma installed
127+
description: macOS hosts with Figma installed
128+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.figma.Desktop';
129+
label_membership_type: dynamic
130+
platform: darwin
131+
- name: Macs with WhatsApp installed
132+
description: macOS hosts with WhatsApp installed
133+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'net.whatsapp.WhatsApp';
134+
label_membership_type: dynamic
135+
platform: darwin
136+
- name: Macs with Android Studio installed
137+
description: macOS hosts with Android Studio installed
138+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.google.android.studio';
139+
label_membership_type: dynamic
140+
platform: darwin
141+
- name: Macs with Zed installed
142+
description: macOS hosts with Zed installed
143+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'dev.zed.Zed';
144+
label_membership_type: dynamic
145+
platform: darwin
146+
- name: Macs with Obsidian installed
147+
description: macOS hosts with Obsidian installed
148+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'md.obsidian';
149+
label_membership_type: dynamic
150+
platform: darwin
151+
- name: Macs with Google Drive installed
152+
description: macOS hosts with Google Drive installed
153+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.google.drivefs';
154+
label_membership_type: dynamic
155+
platform: darwin
156+
- name: Macs with Cursor installed
157+
description: macOS hosts with Cursor installed
158+
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.todesktop.230313mzl4w4u92';
159+
label_membership_type: dynamic
160+
platform: darwin

‎it-and-security/lib/all/labels/windows-with-fleet-maintained-apps-installed.yml‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,3 +33,43 @@
3333
query: SELECT 1 FROM programs WHERE name LIKE 'Microsoft Visual Studio Code%';
3434
label_membership_type: dynamic
3535
platform: windows
36+
- name: x86 Windows hosts with Docker Desktop installed
37+
description: x86 Windows hosts with Docker Desktop installed
38+
query: SELECT 1 FROM programs WHERE name = 'Docker Desktop' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
39+
label_membership_type: dynamic
40+
platform: windows
41+
- name: x86 Windows hosts with GitHub Desktop installed
42+
description: x86 Windows hosts with GitHub Desktop installed
43+
query: SELECT 1 FROM programs WHERE name = 'GitHub Desktop' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
44+
label_membership_type: dynamic
45+
platform: windows
46+
- name: x86 Windows hosts with Postman installed
47+
description: x86 Windows hosts with Postman installed
48+
query: SELECT 1 FROM programs WHERE name LIKE 'Postman%' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
49+
label_membership_type: dynamic
50+
platform: windows
51+
- name: x86 Windows hosts with Sublime Text installed
52+
description: x86 Windows hosts with Sublime Text installed
53+
query: SELECT 1 FROM programs WHERE name = 'Sublime Text' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
54+
label_membership_type: dynamic
55+
platform: windows
56+
- name: x86 Windows hosts with Spotify installed
57+
description: x86 Windows hosts with Spotify installed
58+
query: SELECT 1 FROM programs WHERE name = 'Spotify' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
59+
label_membership_type: dynamic
60+
platform: windows
61+
- name: x86 Windows hosts with Figma installed
62+
description: x86 Windows hosts with Figma installed
63+
query: SELECT 1 FROM programs WHERE name = 'Figma' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
64+
label_membership_type: dynamic
65+
platform: windows
66+
- name: x86 Windows hosts with Google Drive installed
67+
description: x86 Windows hosts with Google Drive installed
68+
query: SELECT 1 FROM programs WHERE name = 'Google Drive' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
69+
label_membership_type: dynamic
70+
platform: windows
71+
- name: x86 Windows hosts with Cursor installed
72+
description: x86 Windows hosts with Cursor installed
73+
query: SELECT 1 FROM programs WHERE name = 'Cursor' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
74+
label_membership_type: dynamic
75+
platform: windows

0 commit comments

Comments
 (0)