Adding policy queries (#8298)

2022-10-24 12:45:58 +00:00
parent 85aa1df954
commit ff1941c755
2 changed files with 44 additions and 1 deletions
@@ -992,4 +992,14 @@ spec:
  tags: compliance, CIS, CIS18.9.108.2.1
  platform: windows
  contributors: defensivedepth
-
+---
+apiVersion: v1
+kind: policy
+spec:
+  name: Identify Apple development secrets (macOS)
+  query: SELECT * FROM keychain_items WHERE label LIKE '%ABCDEFG%';
+  description: "Identifies certificates associated with Apple development signing and notarization. Replace ABCDEFG with your company's identifier."
+  resolution: "Ensure your official Apple builds, signing and notarization happen on a centralized system, and remove these certificates from workstations."
+  tags: compliance, inventory, built-in
+  platform: darwin
+  contributors: GuillaumeRoss