fleet icon indicating copy to clipboard operation
fleet copied to clipboard

Add binaries, with their hash and path, to `GET /hosts?populate_software=true`

Open noahtalerman opened this issue 3 months ago • 5 comments

Goal

User story
As a user hitting the GET /hosts?populate_software=true,
I want to see the binary hash and path in addition to the bundle hash and path.
so that I can tell Santa which binaries to block.

Roadmap item

None.

Original requests

  • #32363

Resources

More info about customer-ufa's workflow in this Google Doc

Changes

Product

  • [ ] UI changes: No changes
  • [ ] CLI (fleetctl) usage changes: No changes
  • [ ] YAML changes: No changes
  • [ ] REST API changes: PR
  • [ ] Fleet's agent (fleetd) changes: New column for binary hash in codesign table (TODO: PR to schema)
  • [ ] GitOps mode UI changes: No changes
  • [ ] GitOps generation changes: No changes
  • [ ] Activity changes: No changes
  • [ ] Permissions changes: No changes
  • [ ] Changes to paid features or tiers: TODO
  • [ ] My device and fleetdm.com/better changes: No changes
  • [ ] Usage statistics: No changes
  • [ ] Other reference documentation changes: TODO
  • [ ] First draft of test plan added
  • [ ] Once shipped, requester has been notified
  • [ ] Once shipped, dogfooding issue has been filed

Engineering

  • [ ] Test plan is finalized
  • [ ] Contributor API changes: TODO
  • [ ] Feature guide changes: TODO
  • [ ] Database schema migrations: TODO
  • [ ] Load testing: TODO
  • [ ] Load testing/osquery-perf improvements: TODO
  • [ ] This is a premium only feature: Yes / No

ℹ️  Please read this issue carefully and understand it. Pay special attention to UI wireframes, especially "dev notes".

QA

Risk assessment

  • Requires testing in a hosted environment: TODO
  • Requires load testing: TODO
  • Risk level: Low / High TODO
  • Risk description: TODO

Test plan

Make sure to go through the list and consider all events that might be related to this story, so we catch edge cases earlier.

  1. TODO
  2. TODO
  3. TODO

Testing notes

Confirmation

  1. [ ] Engineer: Added comment to user story confirming successful completion of test plan.
  2. [ ] QA: Added comment to user story confirming successful completion of test plan.

noahtalerman avatar Sep 26 '25 18:09 noahtalerman

@noahtalerman It looks like we already have this feature. @dantecatalfamo worked on it.

Image

getvictor avatar Dec 02 '25 16:12 getvictor

It looks like we already have this feature. @dantecatalfamo worked on it.

Image

FYI @rachaelshaw

noahtalerman avatar Dec 03 '25 23:12 noahtalerman

TODO: Handle this: https://github.com/fleetdm/fleet/issues/35732

rachaelshaw avatar Dec 04 '25 16:12 rachaelshaw

@rachaelshaw @noahtalerman does this design work? if not, we could have @zwass work on it to get it to customer-ufa faster

zayhanlon avatar Dec 04 '25 22:12 zayhanlon

@zayhanlon we're still doing some research to figure out how the API needs to change, but once we've got an API design ready we'd love @zwass's help on this!

rachaelshaw avatar Dec 10 '25 22:12 rachaelshaw

Image

8 points.

sharon-fdm avatar Dec 18 '25 18:12 sharon-fdm

Tentatively assigning Dante.

sharon-fdm avatar Dec 18 '25 18:12 sharon-fdm