Stefano Bonicatti

Do not catch table or registry exceptions when running tests

1

Change the default for table_exceptions and registry_exceptions to true, so that all tests on tables will fail if an exception is thrown during the querying of a table, but set...

``` 93: ====================================================================== 93: FAIL: test_daemon_sigint (__main__.DaemonTests) 93: ---------------------------------------------------------------------- 93: Traceback (most recent call last): 93: File "test_osqueryd.py", line 153, in test_daemon_sigint 93: self.daemon_sigint_test_helper(pidfile_path) 93: File "test_osqueryd.py", line 141, in...

Update macOS CI build job to use Monterey (macOS 12)

3

Due to a scheduled brownout of Catalina Github Actions runners, we are temporarily removing the separate Catalina test job (PR: https://github.com/osquery/osquery/pull/7700), so that only Big Sur gets tested. Ideally we...

Improvements to osquery AWS logic

3

- Introduce the flag aws_imdsv2_request_attempts to specify how many attempts should be done to retrieve an IMDSv2 token to do a secure request. - Introduce the flag aws_imdsv2_request_interval to specify...

Add the `cpu_usage` and `cpu_peak_usage` columns to the processes table

3

Implement cpu usage calculation using a service that runs every processes_stats_interval seconds and implements the cpu_peak_usage using the last processes_stats_cpu_peak_samples samples. The cpu usage is by default calculated for all...

Add CVE scanning and reporting for third party libraries

7

# Blueprint ## Goal Proactively, instead of reactively, act on the osquery third party libraries CVEs by periodically "scanning" the libraries and open issues when new CVEs are found. ##...

Update CMake version across the osquery and packaging repositories

1

We should update the CMake we use from 3.17.5 to 3.21.2 (current latest version). This should happen across the two repositories (this and packaging). Why: - Needed to build macOS...

getUptime API and boot time meaning are inconsistent

2

# Bug report ### What operating system and version are you using? Ubuntu 18.04 macOS 10.14.6 Windows 10 Azure Pipelines Windows Server 2016 ### What version of osquery are you...

ci: Add code coverage for macOS and Linux

1

- Add the OSQUERY_ENABLE_COVERAGE CMake option, to enable building with code coverage using LLVM. This also adds a generate_coverage target to be run after the tests have run. - Add...

Not the first time this would've been useful, but the need/idea came up again here: https://github.com/osquery/osquery/pull/7651 This is not a full-fledged blueprint but I think it's worth to record the...