Add fleet apps, labels, and patch policies

it-and-security/fleets/workstations.yml

@@ -310,6 +310,86 @@ software:
       setup_experience: true
       categories:
         - Productivity
+    - slug: github/darwin # GitHub Desktop for macOS
+      self_service: true
+      categories:
+        - Developer tools
+    - slug: utm/darwin # UTM for macOS
+      self_service: true
+      categories:
+        - Productivity
+    - slug: imazing-profile-editor/darwin # iMazing Profile Editor for macOS
+      self_service: true
+      categories:
+        - Developer tools
+    - slug: postman/darwin # Postman for macOS
+      self_service: true
+      categories:
+        - Developer tools
+    - slug: grammarly-desktop/darwin # Grammarly Desktop for macOS
+      self_service: true
+      categories:
+        - Productivity
+    - slug: iterm2/darwin # iTerm2 for macOS
+      self_service: true
+      categories:
+        - Developer tools
+    - slug: sublime-text/darwin # Sublime Text for macOS
+      self_service: true
+      categories:
+        - Developer tools
+    - slug: parallels/darwin # Parallels Desktop for macOS
+      self_service: true
+      categories:
+        - Productivity
+    - slug: loom/darwin # Loom for macOS
+      self_service: true
+      categories:
+        - Productivity
+    - slug: spotify/darwin # Spotify for macOS
+      self_service: true
+      categories:
+        - Productivity
+    - slug: rectangle/darwin # Rectangle for macOS
+      self_service: true
+      categories:
+        - Productivity
+    - slug: logi-options+/darwin # Logi Options+ for macOS
+      self_service: true
+      categories:
+        - Productivity
+    - slug: suspicious-package/darwin # Suspicious Package for macOS
+      self_service: true
+      categories:
+        - Developer tools
+    - slug: figma/darwin # Figma for macOS
+      self_service: true
+      categories:
+        - Productivity
+    - slug: whatsapp/darwin # WhatsApp for macOS
+      self_service: true
+      categories:
+        - Communication
+    - slug: android-studio/darwin # Android Studio for macOS
+      self_service: true
+      categories:
+        - Developer tools
+    - slug: zed/darwin # Zed for macOS
+      self_service: true
+      categories:
+        - Developer tools
+    - slug: obsidian/darwin # Obsidian for macOS
+      self_service: true
+      categories:
+        - Productivity
+    - slug: google-drive/darwin # Google Drive for macOS
+      self_service: true
+      categories:
+        - Productivity
+    - slug: cursor/darwin # Cursor for macOS
+      self_service: true
+      categories:
+        - Developer tools
     # Windows apps
     - slug: slack/windows # Slack for Windows
       self_service: true
@@ -353,3 +433,51 @@ software:
       self_service: true
       categories:
         - Developer tools
+    - slug: docker/windows # Docker Desktop for Windows (x86)
+      self_service: true
+      categories:
+        - Developer tools
+      labels_include_any:
+        - "x86-based Windows hosts"
+    - slug: github-desktop/windows # GitHub Desktop for Windows (x86)
+      self_service: true
+      categories:
+        - Developer tools
+      labels_include_any:
+        - "x86-based Windows hosts"
+    - slug: postman/windows # Postman for Windows (x86)
+      self_service: true
+      categories:
+        - Developer tools
+      labels_include_any:
+        - "x86-based Windows hosts"
+    - slug: sublime-text/windows # Sublime Text for Windows (x86)
+      self_service: true
+      categories:
+        - Developer tools
+      labels_include_any:
+        - "x86-based Windows hosts"
+    - slug: spotify/windows # Spotify for Windows (x86)
+      self_service: true
+      categories:
+        - Productivity
+      labels_include_any:
+        - "x86-based Windows hosts"
+    - slug: figma/windows # Figma for Windows (x86)
+      self_service: true
+      categories:
+        - Productivity
+      labels_include_any:
+        - "x86-based Windows hosts"
+    - slug: google-drive/windows # Google Drive for Windows (x86)
+      self_service: true
+      categories:
+        - Productivity
+      labels_include_any:
+        - "x86-based Windows hosts"
+    - slug: cursor/windows # Cursor for Windows (x86)
+      self_service: true
+      categories:
+        - Developer tools
+      labels_include_any:
+        - "x86-based Windows hosts"

it-and-security/lib/all/labels/macs-with-fleet-maintained-apps-installed.yml

@@ -58,3 +58,103 @@
   query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.amazonaws.acvc.osx';
   label_membership_type: dynamic
   platform: darwin
+- name: Macs with GitHub Desktop installed
+  description: macOS hosts with GitHub Desktop installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.github.GitHubClient';
+  label_membership_type: dynamic
+  platform: darwin
+- name: Macs with UTM installed
+  description: macOS hosts with UTM installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.utmapp.UTM';
+  label_membership_type: dynamic
+  platform: darwin
+- name: Macs with iMazing Profile Editor installed
+  description: macOS hosts with iMazing Profile Editor installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.DigiDNA.iMazingProfileEditorMac';
+  label_membership_type: dynamic
+  platform: darwin
+- name: Macs with Postman installed
+  description: macOS hosts with Postman installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.postmanlabs.mac';
+  label_membership_type: dynamic
+  platform: darwin
+- name: Macs with Grammarly Desktop installed
+  description: macOS hosts with Grammarly Desktop installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.grammarly.ProjectLlama';
+  label_membership_type: dynamic
+  platform: darwin
+- name: Macs with iTerm2 installed
+  description: macOS hosts with iTerm2 installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.googlecode.iterm2';
+  label_membership_type: dynamic
+  platform: darwin
+- name: Macs with Sublime Text installed
+  description: macOS hosts with Sublime Text installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.sublimetext.4';
+  label_membership_type: dynamic
+  platform: darwin
+- name: Macs with Parallels Desktop installed
+  description: macOS hosts with Parallels Desktop installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.parallels.desktop.console';
+  label_membership_type: dynamic
+  platform: darwin
+- name: Macs with Loom installed
+  description: macOS hosts with Loom installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.loom.desktop';
+  label_membership_type: dynamic
+  platform: darwin
+- name: Macs with Spotify installed
+  description: macOS hosts with Spotify installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.spotify.client';
+  label_membership_type: dynamic
+  platform: darwin
+- name: Macs with Rectangle installed
+  description: macOS hosts with Rectangle installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.knollsoft.Rectangle';
+  label_membership_type: dynamic
+  platform: darwin
+- name: Macs with Logi Options+ installed
+  description: macOS hosts with Logi Options+ installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.logi.optionsplus';
+  label_membership_type: dynamic
+  platform: darwin
+- name: Macs with Suspicious Package installed
+  description: macOS hosts with Suspicious Package installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.mothersruin.SuspiciousPackage';
+  label_membership_type: dynamic
+  platform: darwin
+- name: Macs with Figma installed
+  description: macOS hosts with Figma installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.figma.Desktop';
+  label_membership_type: dynamic
+  platform: darwin
+- name: Macs with WhatsApp installed
+  description: macOS hosts with WhatsApp installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'net.whatsapp.WhatsApp';
+  label_membership_type: dynamic
+  platform: darwin
+- name: Macs with Android Studio installed
+  description: macOS hosts with Android Studio installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.google.android.studio';
+  label_membership_type: dynamic
+  platform: darwin
+- name: Macs with Zed installed
+  description: macOS hosts with Zed installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'dev.zed.Zed';
+  label_membership_type: dynamic
+  platform: darwin
+- name: Macs with Obsidian installed
+  description: macOS hosts with Obsidian installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'md.obsidian';
+  label_membership_type: dynamic
+  platform: darwin
+- name: Macs with Google Drive installed
+  description: macOS hosts with Google Drive installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.google.drivefs';
+  label_membership_type: dynamic
+  platform: darwin
+- name: Macs with Cursor installed
+  description: macOS hosts with Cursor installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.todesktop.230313mzl4w4u92';
+  label_membership_type: dynamic
+  platform: darwin

it-and-security/lib/all/labels/windows-with-fleet-maintained-apps-installed.yml

@@ -23,13 +23,53 @@
   query: SELECT 1 FROM programs WHERE name = 'Zoom Workplace (X64)' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
   label_membership_type: dynamic
   platform: windows
-- name: Windows hosts with Brave Browser installed
-  description: Windows hosts with Brave Browser installed
-  query: SELECT 1 FROM programs WHERE name = 'Brave';
+- name: x86 Windows hosts with Brave Browser installed
+  description: x86 Windows hosts with Brave Browser installed
+  query: SELECT 1 FROM programs WHERE name = 'Brave' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
   label_membership_type: dynamic
   platform: windows
-- name: Windows hosts with Visual Studio Code installed
-  description: Windows hosts with Visual Studio Code installed
-  query: SELECT 1 FROM programs WHERE name LIKE 'Microsoft Visual Studio Code%';
+- name: x86 Windows hosts with Visual Studio Code installed
+  description: x86 Windows hosts with Visual Studio Code installed
+  query: SELECT 1 FROM programs WHERE name LIKE 'Microsoft Visual Studio Code%' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
+  label_membership_type: dynamic
+  platform: windows
+- name: x86 Windows hosts with Docker Desktop installed
+  description: x86 Windows hosts with Docker Desktop installed
+  query: SELECT 1 FROM programs WHERE name = 'Docker Desktop' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
+  label_membership_type: dynamic
+  platform: windows
+- name: x86 Windows hosts with GitHub Desktop installed
+  description: x86 Windows hosts with GitHub Desktop installed
+  query: SELECT 1 FROM programs WHERE name = 'GitHub Desktop' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
+  label_membership_type: dynamic
+  platform: windows
+- name: x86 Windows hosts with Postman installed
+  description: x86 Windows hosts with Postman installed
+  query: SELECT 1 FROM programs WHERE name LIKE 'Postman%' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
+  label_membership_type: dynamic
+  platform: windows
+- name: x86 Windows hosts with Sublime Text installed
+  description: x86 Windows hosts with Sublime Text installed
+  query: SELECT 1 FROM programs WHERE name = 'Sublime Text' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
+  label_membership_type: dynamic
+  platform: windows
+- name: x86 Windows hosts with Spotify installed
+  description: x86 Windows hosts with Spotify installed
+  query: SELECT 1 FROM programs WHERE name = 'Spotify' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
+  label_membership_type: dynamic
+  platform: windows
+- name: x86 Windows hosts with Figma installed
+  description: x86 Windows hosts with Figma installed
+  query: SELECT 1 FROM programs WHERE name = 'Figma' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
+  label_membership_type: dynamic
+  platform: windows
+- name: x86 Windows hosts with Google Drive installed
+  description: x86 Windows hosts with Google Drive installed
+  query: SELECT 1 FROM programs WHERE name = 'Google Drive' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
+  label_membership_type: dynamic
+  platform: windows
+- name: x86 Windows hosts with Cursor installed
+  description: x86 Windows hosts with Cursor installed
+  query: SELECT 1 FROM programs WHERE name = 'Cursor' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
   label_membership_type: dynamic
   platform: windows