Restrict Windows app labels to x86 hosts

Rename Brave and Visual Studio Code labels to indicate x86-only and add an arch check (exclude ARM) in their queries in it-and-security/lib/all/labels/windows-with-fleet-maintained-apps-installed.yml. Update patch-fleet-maintained-apps.yml to reference the new x86 label names so policies target the correct hosts.

Author: allenhouchins

it-and-security/lib/all/labels/windows-with-fleet-maintained-apps-installed.yml

@@ -23,14 +23,14 @@
   query: SELECT 1 FROM programs WHERE name = 'Zoom Workplace (X64)' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
   label_membership_type: dynamic
   platform: windows
-- name: Windows hosts with Brave Browser installed
-  description: Windows hosts with Brave Browser installed
-  query: SELECT 1 FROM programs WHERE name = 'Brave';
+- name: x86 Windows hosts with Brave Browser installed
+  description: x86 Windows hosts with Brave Browser installed
+  query: SELECT 1 FROM programs WHERE name = 'Brave' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
   label_membership_type: dynamic
   platform: windows
-- name: Windows hosts with Visual Studio Code installed
-  description: Windows hosts with Visual Studio Code installed
-  query: SELECT 1 FROM programs WHERE name LIKE 'Microsoft Visual Studio Code%';
+- name: x86 Windows hosts with Visual Studio Code installed
+  description: x86 Windows hosts with Visual Studio Code installed
+  query: SELECT 1 FROM programs WHERE name LIKE 'Microsoft Visual Studio Code%' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
   label_membership_type: dynamic
   platform: windows
 - name: x86 Windows hosts with Docker Desktop installed

it-and-security/lib/windows/policies/patch-fleet-maintained-apps.yml

@@ -45,15 +45,15 @@
   fleet_maintained_app_slug: brave-browser/windows
   install_software: false
   labels_include_any:
-    - Windows hosts with Brave Browser installed
+    - x86 Windows hosts with Brave Browser installed
 - name: Windows - Visual Studio Code up to date
   description: The host may have an outdated version of Visual Studio Code, potentially risking security vulnerabilities or compatibility issues.
   resolution: "Download the latest version from Self-service or check for updates using Visual Studio Code's built-in update functionality. You can also uninstall Visual Studio Code if you are no longer using it."
   type: patch
   fleet_maintained_app_slug: visual-studio-code/windows
   install_software: false
   labels_include_any:
-    - Windows hosts with Visual Studio Code installed
+    - x86 Windows hosts with Visual Studio Code installed
 - name: Windows - Docker Desktop up to date
   description: The host may have an outdated version of Docker Desktop, potentially risking security vulnerabilities or compatibility issues.
   resolution: "Download the latest version from Self-service or check for updates using Docker Desktop's built-in update functionality. You can also uninstall Docker Desktop if you are no longer using it."