dependabot[bot]
27a59ed37c
Bumps [grunt](https://github.com/gruntjs/grunt) from 1.0.4 to 1.5.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gruntjs/grunt/releases">grunt's releases</a>.</em></p> <blockquote> <h2>v1.5.3</h2> <ul> <li>Merge pull request <a href="https://redirect.github.com/gruntjs/grunt/issues/1745">#1745</a> from gruntjs/fix-copy-op 572d79b</li> <li>Patch up race condition in symlink copying. 58016ff</li> <li>Merge pull request <a href="https://redirect.github.com/gruntjs/grunt/issues/1746">#1746</a> from JamieSlome/patch-1 0749e1d</li> <li>Create SECURITY.md 69b7c50</li> </ul> <p><a href="https://github.com/gruntjs/grunt/compare/v1.5.2...v1.5.3">https://github.com/gruntjs/grunt/compare/v1.5.2...v1.5.3</a></p> <h2>v1.5.2</h2> <ul> <li>Update Changelog 7f15fd5</li> <li>Merge pull request <a href="https://redirect.github.com/gruntjs/grunt/issues/1743">#1743</a> from gruntjs/cleanup-link b0ec6e1</li> <li>Clean up link handling 433f91b</li> </ul> <p><a href="https://github.com/gruntjs/grunt/compare/v1.5.1...v1.5.2">https://github.com/gruntjs/grunt/compare/v1.5.1...v1.5.2</a></p> <h2>v1.5.1</h2> <ul> <li>Merge pull request <a href="https://redirect.github.com/gruntjs/grunt/issues/1742">#1742</a> from gruntjs/update-symlink-test ad22608</li> <li>Fix symlink test 0652305</li> </ul> <p><a href="https://github.com/gruntjs/grunt/compare/v1.5.0...v1.5.1">https://github.com/gruntjs/grunt/compare/v1.5.0...v1.5.1</a></p> <h2>v1.5.0</h2> <ul> <li>Updated changelog b2b2c2b</li> <li>Merge pull request <a href="https://redirect.github.com/gruntjs/grunt/issues/1740">#1740</a> from gruntjs/update-deps-22-10 3eda6ae</li> <li>Update testing matrix 47d32de</li> <li>More updates 2e9161c</li> <li>Remove console log 04b960e</li> <li>Update dependencies, tests... aad3d45</li> <li>Merge pull request <a href="https://redirect.github.com/gruntjs/grunt/issues/1736">#1736</a> from justlep/main fdc7056</li> <li>support .cjs extension e35fe54</li> </ul> <p><a href="https://github.com/gruntjs/grunt/compare/v1.4.1...v1.5.0">https://github.com/gruntjs/grunt/compare/v1.4.1...v1.5.0</a></p> <h2>v1.4.1</h2> <ul> <li>Update Changelog e7625e5</li> <li>Merge pull request <a href="https://redirect.github.com/gruntjs/grunt/issues/1731">#1731</a> from gruntjs/update-options 5d67e34</li> <li>Fix ci install d13bf88</li> <li>Switch to Actions 08896ae</li> <li>Update grunt-known-options eee0673</li> <li>Add note about a breaking change 1b6e288</li> </ul> <p><a href="https://github.com/gruntjs/grunt/compare/v1.4.0...v1.4.1">https://github.com/gruntjs/grunt/compare/v1.4.0...v1.4.1</a></p> <h2>v1.4.0</h2> <ul> <li>Merge pull request <a href="https://redirect.github.com/gruntjs/grunt/issues/1728">#1728</a> from gruntjs/update-deps-changelog 63b2e89</li> <li>Update changelog and util dep 106ed17</li> <li>Merge pull request <a href="https://redirect.github.com/gruntjs/grunt/issues/1727">#1727</a> from gruntjs/update-deps-apr 49de70b</li> <li>Update CLI and nodeunit 47cf8b6</li> <li>Merge pull request <a href="https://redirect.github.com/gruntjs/grunt/issues/1722">#1722</a> from gruntjs/update-through e86db1c</li> <li>Update deps 4952368</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/gruntjs/grunt/blob/main/CHANGELOG">grunt's changelog</a>.</em></p> <blockquote> <p>v1.5.3 date: 2022-04-23 changes: - Patch up race condition in symlink copying. v1.5.2 date: 2022-04-12 changes: - Unlink symlinks when copy destination is a symlink. v1.5.1 date: 2022-04-11 changes: - Fixed symlink destination handling. v1.5.0 date: 2022-04-10 changes: - Updated dependencies. - Add symlink handling for copying files. v1.4.1 date: 2021-05-24 changes: - Fix --preload option to be a known option - Switch to GitHub Actions v1.4.0 date: 2021-04-21 changes: - Security fixes in production and dev dependencies - Liftup/Liftoff upgrade breaking change. Update your scripts to use --preload instead of --require. Ref: <a href="https://github.com/js-cli/js-liftoff/commit/e7a969d6706e730d90abb4e24d3cb4d3bce06ddb">https://github.com/js-cli/js-liftoff/commit/e7a969d6706e730d90abb4e24d3cb4d3bce06ddb</a>. v1.3.0 date: 2020-08-18 changes: - Switch to use <code>safeLoad</code> for loading YML files via <code>file.readYAML</code>. - Upgrade legacy-log to ~3.0.0. - Upgrade legacy-util to ~2.0.0. v1.2.1 date: 2020-07-07 changes: - Remove path-is-absolute dependency. (PR: <a href="https://redirect.github.com/gruntjs/grunt/pull/1715">gruntjs/grunt#1715</a>) v1.2.0 date: 2020-07-03 changes: - Allow usage of grunt plugins that are located in any location that is visible to Node.js and NPM, instead of node_modules directly inside package that have a dev dependency to these plugins. (PR: <a href="https://redirect.github.com/gruntjs/grunt/pull/1677">gruntjs/grunt#1677</a>) - Removed coffeescript from dependencies. To ease transition, if coffeescript is still around, Grunt will attempt to load it. If it is not, and the user loads a CoffeeScript file, Grunt will print a useful error indicating that the coffeescript package should be installed as a dev dependency.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gruntjs/grunt/commit/82d79b803798f2a5f19662df9e12bef977dfa189"><code>82d79b8</code></a> 1.5.3</li> <li><a href="https://github.com/gruntjs/grunt/commit/572d79b08767dd22ecc162b8d41825f9f8238fef"><code>572d79b</code></a> Merge pull request <a href="https://redirect.github.com/gruntjs/grunt/issues/1745">#1745</a> from gruntjs/fix-copy-op</li> <li><a href="https://github.com/gruntjs/grunt/commit/58016ffac5ed9338b63ecc2a63710f5027362bae"><code>58016ff</code></a> Patch up race condition in symlink copying.</li> <li><a href="https://github.com/gruntjs/grunt/commit/0749e1da0d8f88c5137c4eb4e9531e1b7498760e"><code>0749e1d</code></a> Merge pull request <a href="https://redirect.github.com/gruntjs/grunt/issues/1746">#1746</a> from JamieSlome/patch-1</li> <li><a href="https://github.com/gruntjs/grunt/commit/69b7c506cbf430e06bfe1a81050351e607c30380"><code>69b7c50</code></a> Create SECURITY.md</li> <li><a href="https://github.com/gruntjs/grunt/commit/ac667b24cabfff77cf769f9dbf9ddba9576b3dc2"><code>ac667b2</code></a> 1.5.2</li> <li><a href="https://github.com/gruntjs/grunt/commit/7f15fd5ad9fb33ca0fe4680af7bce84d69deb673"><code>7f15fd5</code></a> Update Changelog</li> <li><a href="https://github.com/gruntjs/grunt/commit/b0ec6e12426fc8d5720dee1702f6a67455c5986c"><code>b0ec6e1</code></a> Merge pull request <a href="https://redirect.github.com/gruntjs/grunt/issues/1743">#1743</a> from gruntjs/cleanup-link</li> <li><a href="https://github.com/gruntjs/grunt/commit/433f91b78df99d83daa6f56a5505ead743627c30"><code>433f91b</code></a> Clean up link handling</li> <li><a href="https://github.com/gruntjs/grunt/commit/d5969eccf2493c2c579c55a617c70cab48dc12d3"><code>d5969ec</code></a> 1.5.1</li> <li>Additional commits viewable in <a href="https://github.com/gruntjs/grunt/compare/v1.0.4...v1.5.3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/fleetdm/fleet/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
News · Report a bug · Handbook · Why open source? · Art
Open-source platform for IT and security teams with thousands of computers. Designed for APIs, GitOps, webhooks, YAML, and humans.
What's it for?
Organizations like Fastly and Gusto use Fleet for vulnerability reporting, detection engineering, device management (MDM), device health monitoring, posture-based access control, managing unused software licenses, and more.
Explore data
To see what kind of data you can use Fleet to gather, check out the table reference documentation.
Out-of-the-box policies
Fleet includes out-of-the box support for all CIS benchmarks for macOS and Windows, as well as many simpler queries.
Take as much or as little as you need for your organization.
Supported platforms
Here are the platforms Fleet currently supports:
- Linux (all distros)
- macOS
- Windows
- Chromebooks
- Amazon Web Services (AWS)
- Google Cloud (GCP)
- Azure (Microsoft cloud)
- Data centers
- Containers (kube, etc)
- Linux-based IoT devices
Lighter than air
Fleet is lightweight and modular. You can use it for security without using it for MDM, and vice versa. You can turn off features you are not using.
Openness
Fleet is dedicated to flexibility, accessibility, and clarity. We think everyone can contribute and that tools should be as easy as possible for everyone to understand.
Good neighbors
Fleet has no ambition to replace all of your other tools. (Though it might replace some, if you want it to.) Ready-to-use, enterprise-friendly integrations exist for Snowflake, Splunk, GitHub Actions, Vanta, Elastic Jira, Zendesk, and more.
Fleet plays well with Munki, Chef, Puppet, and Ansible, as well as with security tools like Crowdstrike and SentinelOne. For example, you can use the free version of Fleet to quickly report on what hosts are actually running your EDR agent.
While most folks prefer to use one or the other, Fleet can also coexist peacefully with Rapid7 and other agent-based vulnerability scanners. This can be useful during migrations.
Free as in free
The free version of Fleet will always be free. Fleet is independently backed and actively maintained with the help of many amazing contributors.
Longevity
The company behind Fleet is founded (and majority-owned) by true believers in open source. The company's business model is influenced by GitLab (NYSE: GTLB), with great investors, happy customers, and the capacity to become profitable at any time.
In keeping with Fleet's value of openness, Fleet Device Management's company handbook is public and open source. You can read about the history of Fleet and osquery and our commitment to improving the product.
Is it any good?
Fleet is used in production by IT and security teams with thousands of laptops and servers. Many deployments support tens of thousands of hosts, and a few large organizations manage deployments as large as 400,000+ hosts.
Chat
Please join us in MacAdmins Slack or in osquery Slack.
The Fleet community is full of kind and helpful people. Whether or not you are a paying customer, if you need help, just ask.
Contributing 
The landscape of cybersecurity and IT is too complex. Let's open it up.
Contributions are welcome, whether you answer questions on Slack / GitHub / StackOverflow / LinkedIn / Twitter, improve the documentation or website, write a tutorial, give a talk at a conference or local meetup, give an interview on a podcast, troubleshoot reported issues, or submit a patch. The Fleet code of conduct is on GitHub.
What's next?
To see what Fleet can do, head over to fleetdm.com and try it out for yourself, grab time with one of the maintainers to discuss, or visit the docs and roll it out to your organization.
Production deployment
Fleet is simple enough to spin up for yourself. Or you can have us host it for you. Premium features are available either way.
Documentation
Complete documentation for Fleet can be found at https://fleetdm.com/docs.
License
The free version of Fleet is available under the MIT license. The commercial license is also designed to allow contributions to paid features for users whose employment agreements allow them to contribute to open source projects. (See LICENSE.md for details.)
Fleet is built on osquery, nanoMDM, Nudge, and swiftDialog.