Juan Fernandez aeb56916ee Block host enrollment with empty enroll secrets ...

VerifyEnrollSecret matched by exact string, so an empty enroll_secret
matched any stored empty secret and issued a valid node key. Guard the
shared chokepoint: reject empty/whitespace secrets before matching,
closing all enrollment paths (osquery, Orbit, Apple MDM, Android). Add a
migration to delete pre-existing empty secrets.

2026-07-24 10:29:46 -04:00

..

acl

…

activity

…

api_endpoints

Move "Install self-service software" endpoint to public REST API docs (#49618)

2026-07-22 18:51:50 -05:00

archtest

…

authz

Release from AB backend support (#49680)

2026-07-22 20:01:41 +02:00

aws_common

…

bindata

…

chart

Enforce API-only endpoint restrictions on chart routes (#49477)

2026-07-23 10:44:13 -04:00

config

Allow bypassing network blocking in production via config (#49747)

2026-07-22 13:23:21 -03:00

contexts

…

cron

Android certificates resent_certificate (#49171)

2026-07-13 13:22:50 -05:00

crypto

…

datastore

Block host enrollment with empty enroll secrets

2026-07-24 10:29:46 -04:00

dev_mode

…

errorstore

…

fleet

Stop leaking cross-team software title names via the hosts endpoint (#49638)

2026-07-24 10:39:13 -03:00

goose

…

health

…

launcher

…

live_query

Skip live-query reverse-index read when no reverse queries are active

2026-07-13 09:53:37 -04:00

logging

…

mail

…

mdm

Release from AB backend support (#49680)

2026-07-22 20:01:41 +02:00

mock

Stop leaking cross-team software title names via the hosts endpoint (#49638)

2026-07-24 10:39:13 -03:00

platform

…

policies

…

ptr

…

pubsub

…

service

Block host enrollment with empty enroll secrets

2026-07-24 10:29:46 -04:00

shellquote

…

sso

…

test

…

variables

…

version

…

vulnerabilities

Generate CPE for Firefox Developer Edition on macOS

2026-07-22 08:04:38 -04:00

webhooks

…

websocket

…

worker

test case and doc to ensure bootstrap package comes before profiles (#49808)

2026-07-23 19:21:11 +02:00

utils_test.go

…

utils.go

…