Commit Graph
21854 Commits
Author SHA1 Message Date
Brock Walters 7f4124f3d2 Create security-baselines-for-linux.md (#40370)
Chapter 3 of protecting Linux series
2026-02-24 07:58:39 -05:00
Irena Reedy d7ca8f52f3 Update healthcare.technology.organization.md (#40382)
- sentence casing 
- meta description
2026-02-24 17:09:21 +09:00
Irena Reedy feae8c15b5 Update and rename 0pen-source-software-organization.md to open-source… (#40379)
…-software-organization.md

- sentence case 
- meta description
2026-02-24 16:40:30 +09:00
Irena Reedy 6585330fb6 Update financial-services-platform.md (#40380)
- sentence casing 
- meta description
2026-02-24 16:39:46 +09:00
Irena Reedy c49ebe4212 Update gaming-technology-company.md (#40381)
- sentence case
- meta description
2026-02-24 16:39:16 +09:00
Irena Reedy 1b634e727c Update independent-journalism-nonprofit.md (#40383)
- sentence case 
- meta description
2026-02-24 16:27:25 +09:00
Mike Thomas 729585a8b9 Updated case studies (#40384)
- Fixed sentence casing
- Improved meta descriptions
2026-02-24 16:26:22 +09:00
Mike Thomas cb2e8db2bc Update scaling-agritech-with-lake-to-plate-visibility.md (#40378)
- Fixed sentence casing
- Updated meta description to highlight the business value
2026-02-24 15:41:09 +09:00
Mike Thomas d219377fd5 Update scaling-financial-security-with-gitops.md (#40377)
- Fixed sentence casing
- Updated the meta description
2026-02-24 15:38:21 +09:00
Scott Gress 772fb12cf5 Add more deprecation logs and mute by default (#40305)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #40122

# Details

* Adds deprecation warnings to `fleetctl apply`
* Adds alias conflict errors (i.e. using both new and deprecated keys in
the same spec) to `fleetctl apply`
* Adds logic around all deprecated field warnings to check the topic
first
* Disables deprecation warnings by default for `fleet serve`, `fleetctl
gitops` and `fleetctl apply`
* Enables deprecation warnings for dogfood via env var

To turn on warnings:
* In `fleet serve`, use either
`--logging_enable_topics=deprecated-field-names` or the
`FLEET_LOGGING_ENABLE_TOPICS=deprecated-field-names` env var
* In `fleetctl gitops` / `fleetctl apply` use either
`--enable-log-topics=deprecated-field-names` or
`FLEET_ENABLE_LOG_TOPICS=deprecated-field-names`

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [X] Added/updated automated tests
- [X] QA'd all new/changed functionality manually

tested in `fleetctl apply`, `fleet serve` and `fleet gitops` that
warnings are suppressed by default and added when the appropriate env
var or CLI option is used
2026-02-23 23:09:08 -06:00
Irena Reedy e08318c9ab Create gaming-technology-company.md (#40338) 2026-02-23 20:59:53 -08:00
Irena Reedy ddef6c2c33 Update scaling-agritech-with-lake-to-plate-visibility.md (#40375) 2026-02-23 22:53:20 -06:00
Irena ReedyandAshish Kuthiala fd3dd4c02f Create 0pen-source-software-organization.md (#40333)
Co-authored-by: Ashish Kuthiala <53918208+akuthiala@users.noreply.github.com>
2026-02-23 22:44:18 -06:00
Irena ReedyandAshish Kuthiala cb940e7819 Create cannabis-technology-company.md (#40337)
Co-authored-by: Ashish Kuthiala <53918208+akuthiala@users.noreply.github.com>
2026-02-23 22:39:32 -06:00
Irena ReedyandAshish Kuthiala 879442e58b Create banking-as-a-service-platform.md (#40339)
Co-authored-by: Ashish Kuthiala <53918208+akuthiala@users.noreply.github.com>
2026-02-23 22:37:26 -06:00
Irena ReedyandAshish Kuthiala 6a5c7ed999 Create robotics-company.md (#40340)
Co-authored-by: Ashish Kuthiala <53918208+akuthiala@users.noreply.github.com>
2026-02-23 22:36:45 -06:00
Irena ReedyandAshish Kuthiala 6b8dc9f82b Create financial-technology-company.md (#40341)
Co-authored-by: Ashish Kuthiala <53918208+akuthiala@users.noreply.github.com>
2026-02-23 22:35:41 -06:00
Irena ReedyandAshish Kuthiala a0cf62baa1 Create independent-journalism-nonprofit.md (#40342)
Co-authored-by: Ashish Kuthiala <53918208+akuthiala@users.noreply.github.com>
2026-02-23 22:34:34 -06:00
Irena ReedyandAshish Kuthiala a6f298af94 Create all-in-one IT-platform-provider.md (#40343)
Co-authored-by: Ashish Kuthiala <53918208+akuthiala@users.noreply.github.com>
2026-02-23 22:33:13 -06:00
Irena ReedyandAshish Kuthiala 4597bfb34d Create healthcare.technology.organization.md (#40344)
Co-authored-by: Ashish Kuthiala <53918208+akuthiala@users.noreply.github.com>
2026-02-23 22:32:24 -06:00
Irena ReedyandAshish Kuthiala b4f8ce4a08 Create scaling-financial-security-with-gitops.md (#40361)
Co-authored-by: Ashish Kuthiala <53918208+akuthiala@users.noreply.github.com>
2026-02-23 22:31:11 -06:00
Irena ReedyandAshish Kuthiala 4792a35cbe Create scaling-agritech-with-lake-to-plate-visibility.md (#40363)
case study

---------

Co-authored-by: Ashish Kuthiala <53918208+akuthiala@users.noreply.github.com>
2026-02-23 22:29:48 -06:00
bf1f155a32 Emphasize infrastructure as code over GitOps on fleet-gitops marketing page (#40224)
## Summary

Updates the `/fleet-gitops` marketing page
(`website/views/pages/fleet-gitops.ejs`) and its meta tags
(`website/config/routes.js`) to lead with **infrastructure as code**
rather than **GitOps** throughout headings, body copy, and meta tags —
using varied, natural phrasing instead of rigidly prefixing "Fleet"
every time.

Also adds a new **AI-accelerated IT** section with Kilocode screenshot
reference and three pitch points about AI-accelerated device management.

### Changes
- Page title tag: `Fleet GitOps` → `Infrastructure as code`
- Meta description updated to emphasize infra-as-code
- Hero `<h4>`: `Fleet GitOps` → `Infrastructure as code`
- Bottom CTA `<h4>`: `Fleet GitOps` → `Infrastructure as code for your
devices`
- Hero paragraph rewritten to lead with infra-as-code
- Features list item heading: `Get to know Fleet infrastructure as code`
→ `Manage your infrastructure as code`
- Section heading: `Get to know Fleet infrastructure as code` →
`Infrastructure as code for your devices`
- Body copy: `adopt Fleet infrastructure as code` → `adopt
infrastructure as code for device management`
- Image alt text, caption, and two-column feature body copy updated
- Workshop CTA heading: `GitOps workshop` → `Infrastructure as code
workshop`
- Challenges section rewritten to lead with infra-as-code; GitOps still
mentioned where it fits naturally
- Testimonial quote updated to reference infra-as-code
- **New**: AI-accelerated IT section with Kilocode screenshot and three
pitch points:
- Everyone can contribute, but an expert from IT stays the human in the
loop
- Without GitOps there is no way to do AI-accelerated device management
- Iterate more quickly by reducing friction and hand-offs with natural
language changes via tools like Kilocode

### What stays as GitOps
- Workshop href (`/gitops-workshop`) — URL unchanged
- One natural mention: "If DevOps or GitOps is already used by an
organization…"
- Workshop link anchor text in the challenges section body

Built for
[mikermcneil](https://fleetdm.slack.com/archives/D0AFASLRHNU/p1771879170001129)
by [Kilo for Slack](https://kilo.ai/features/slack-integration)

---------

Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
Co-authored-by: Kilo Code <kilo@kilo.ai>
2026-02-23 22:23:25 -06:00
Irena ReedyandAshish Kuthiala caf825fcc0 Irenareedy patch 3 deebradel case study 1 (#40330)
Co-authored-by: Ashish Kuthiala <53918208+akuthiala@users.noreply.github.com>
2026-02-23 22:11:28 -06:00
Irena ReedyandAshish Kuthiala b1bff4c5e9 Create financial-services-platform.md (#40332)
Co-authored-by: Ashish Kuthiala <53918208+akuthiala@users.noreply.github.com>
2026-02-23 22:10:04 -06:00
Irena Reedy 2e5f63cb7d Create enterprise-AI-security-company.md (#40334) 2026-02-23 22:07:05 -06:00
Irena Reedy d371d9cd05 Create modular-workspace-software-company.md (#40335) 2026-02-23 22:05:46 -06:00
Allen Houchins 452f1e8b1f Add GIMP as a Windows FMA (#40372)
This pull request adds Windows support for GIMP version 3.0.8-2 to the
maintained apps. It introduces new install and uninstall scripts,
updates the app metadata, and provides integration details for Fleet's
package management.

New GIMP Windows app integration:

* App metadata: Added `gimp.json` in the `winget` inputs directory,
specifying package details, installer type, architecture, and default
categories.
* App listing: Updated `apps.json` to include the new GIMP Windows entry
with platform, slug, unique identifier, and description.

Installer and uninstaller scripts:

* Install script: Added `gimp_install.ps1` for silent, machine-scope
installation using Inno Setup installer flags.
* Uninstall script: Added `gimp_uninstall.ps1` for silent removal,
including logic to locate the correct uninstaller and handle edge cases.

Fleet integration and versioning:

* App version definition: Created `gimp/windows.json` output file,
detailing version, installer URL, install/uninstall script references,
SHA256, and Fleet query for existence.
2026-02-23 21:28:09 -06:00
jacobshandling 0ec8743cb1 Use 'Agent' dataset title and sort key for vanilla osquery hosts (#40369)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #
https://github.com/fleetdm/fleet/issues/39794#issuecomment-3916992159

Host with vanilla osquery installation lists "Agent" vital:
<img width="959" height="521" alt="Screenshot 2026-02-23 at 5 33 23 PM"
src="https://github.com/user-attachments/assets/216a7209-19ca-46b2-ae1c-ff18bbad3bc7"
/>


- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually
2026-02-23 18:14:15 -08:00
Jorge Falcon 17d8fc2ed2 Dogfood monitoring module to 1.9.0 and set mysql_tls_config = true (#40355)
- Monitoring module version updated to tf-mod-addon-monitoring-v1.9.0
- `mysql_tls_config` set to `true`
2026-02-23 19:52:04 -05:00
Victor LyuboslavskyandRachael Shaw f6a7231810 Updating docs for Smallstep integration (#40346)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #39558

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2026-02-23 17:56:22 -06:00
Rachael Shaw cb67d9074e Update OpenClaw article images to match conventions (#40359)
The images were causing an error that prevented the website from
recompiling. This rename should fix.
2026-02-23 18:21:00 -05:00
Irena Reedy ddeeb39f69 Update fleet-4.81.0.md (#40325)
Embedded 4.81.0
2026-02-23 17:00:08 -05:00
Ian Littman 04a9f1a2df Add gm tool for pulling all issues from a repo and filtering client-side-ish to only ones that had a given label at any point (#39524)
This absolutely slams GitHub rate limits, but one API request per page
of issues plus one API request per issue is the only sure way to get
this data, so it is what it is. May need to add a "pick up where you
left off" feature but this is at least a starting point.
2026-02-23 15:18:32 -06:00
Noah Talerman 4258e62fa3 FAQ: Mac Admins osquery extension support (#40014)
It's not clear what version and what tables Fleet supports:
https://fleetdm.slack.com/archives/C052K2LAMCP/p1771342324651109
2026-02-23 14:44:09 -06:00
Victor Lyuboslavsky d7f2c5dfd9 Add Windows OS coverage check (#40231) 2026-02-23 14:26:36 -06:00
Katheryn SatterleeandEric 720d24d13c Refactor notes section in mcp_listening_servers.yml (#39638)
Added a note that mcp_listening_tables may raise flags in EDR tools due
to unusual network activity.

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2026-02-23 14:25:27 -06:00
Tim Lee 8085b228ec Fix nvdvulns tool (#40321) 2026-02-23 13:24:54 -07:00
Nico 311999fbc7 Migrate some 'Query' occurrences to 'Report' (#40320)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
Observed some places where we still show Query instead of Report:

<img width="1557" height="689" alt="Screenshot 2026-02-23 at 3 54 38 PM"
src="https://github.com/user-attachments/assets/df677e6a-05a3-4d5c-8751-b6f25f845c31"
/>
<img width="2521" height="496" alt="Screenshot 2026-02-23 at 3 54 49 PM"
src="https://github.com/user-attachments/assets/a0c706cf-49b9-410e-919a-2482589114c3"
/>


# Checklist for submitter

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] Added/updated automated tests

- [x] QA'd all new/changed functionality manually

<img width="1496" height="666" alt="Screenshot 2026-02-23 at 4 13 09 PM"
src="https://github.com/user-attachments/assets/de0ed5bc-8156-42f4-9428-b2477ea8c90d"
/>

<img width="2547" height="562" alt="Screenshot 2026-02-23 at 5 11 34 PM"
src="https://github.com/user-attachments/assets/e9d55b93-8221-43d8-9ffe-cc2e8de433f5"
/>
2026-02-23 17:18:43 -03:00
Josh Roskos 10b74f66d1 [Guide] Secure local admin passwords with LAPS and 1Password (#39779)
Guide based on a workflow I built that can securely store local admin
credentials in 1Password.
https://github.com/kc9wwh/laps-1password

Slack discussion
[here](https://fleetdm.slack.com/archives/C062D0THVV1/p1770774764790139).
2026-02-23 14:10:36 -06:00
Katheryn SatterleeandRachael Shaw 9e4a907f98 Fix typo in commands link and update API example (#40206)
Moved team_id in Batch update configuration profiles endpoint example
from request body to the request url.

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2026-02-23 13:42:32 -06:00
Victor Lyuboslavsky 763fbf318d Migrating server/worker and related code to slog (#40205)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #40054

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.

## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

## Release Notes

* **Refactor**
* Updated logging infrastructure across background jobs and worker
services to use standardized structured logging, improving consistency
and log output formatting across the system.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-02-23 13:18:07 -06:00
Brock Walters 3d81a21ace Update mdm-commands.md (#40247)
changed byline to me.
2026-02-23 11:00:21 -08:00
Brock Walters 7690628327 Update mitigation-assets-and-detection-patterns-for-ai-agents-like-openclaw.md (#40252)
Moved YAML files to /docs/solutions/all from macos.
2026-02-23 11:00:03 -08:00
Brock Walters e236627403 Update openclaw-open-for-work.md (#40255)
added link
2026-02-23 10:59:41 -08:00
Brock Walters d511ce2f83 Add .png for OpenClaw: Open for work? article (#40265)
charts.
2026-02-23 10:59:13 -08:00
Allen Houchins 14e0bffe0e Recategorize software (#40312)
Annotate many software, app_store_apps, and fleet_maintained_apps
entries in it-and-security/teams/workstations.yml with a `categories`
field (e.g., Security, Productivity, Utilities, Browsers, Developer
tools, Communication). This adds metadata to better organize the
self-service catalog and improve filtering/UX for workstation app
management.
2026-02-23 12:55:20 -06:00
Allen Houchins de487eae4f Add Okta Verify to Setup experience for "Employee-issued mobile devices" (#40310)
This pull request makes a minor update to the configuration for
company-owned mobile devices. The change enables the `setup_experience`
option for the Okta Verify app in the
`it-and-security/teams/company-owned-mobile-devices.yml` file.
2026-02-23 12:34:28 -06:00
Magnus Jensen b0cc88858b Add contributor documentation on configuring Windows Autopilot (#40295)
Follow up doc update from my PoC work, to make it easier for others next
time.
2026-02-23 11:48:02 -05:00
Tim Lee 3fd665e200 Order By Vulnerability (#40143) 2026-02-23 09:42:36 -07:00