wazuh-packages
wazuh-packages copied to clipboard
Feature Request: Add Wazuh agent installer to Winget repository
Wazuh version | Install type | Action performed | Platform |
---|---|---|---|
N/A | Agent | Install | N/A |
Winget is a package manager for Windows being maintained by Microsoft. Therefore, it would be a feasible approach to enable the users manage agent updates through Winget.
There are community maintained versions of Wazuh agent in the Winget repository but it's better to make it a part of Wazuh packages release process.
Hello @zbalkan
I've been looking at the repository and it seems like a very interesting idea.
On the other hand, I see that the packages are being marked with the Wazuh, Inc.
publisher, and although we provide the package URL, we are not the ones providing the package through Winget
. I believe that this is extremely dangerous for users since this contribution is made entirely from the community itself, and one might think that we were the ones who provided this when that is not the case.
https://github.com/microsoft/winget-pkgs/blob/b1817cb9a207a5d61ab02c7b628af453c2082a46/manifests/w/Wazuh/WazuhAgent/4.4.0/Wazuh.WazuhAgent.locale.en-US.yaml#L7
I am going to elevate this issue so that decisions can be made about it, thank you very much for the request!
It looks like this repository only has packages up until Wazuh 4.4.
This repository is community made. It's the responsibility of Wazuh Inc to provide due diligence by accepting Winget as a source, removing Wazuh packages from unofficial repositories, or informing its user base that Winget packages are not the official resources. Ignoring the situation can be considered negligence.