diff --git a/.github/workflows/appinspect.yml b/.github/workflows/appinspect.yml index 616e36e..58ec1f2 100644 --- a/.github/workflows/appinspect.yml +++ b/.github/workflows/appinspect.yml @@ -5,12 +5,30 @@ on: - main - master paths: - - "src/**" + - "SA-CrowdstrikeDevices/**" types: [opened, ready_for_review] jobs: - call-packaging-workflow: - uses: ZachChristensen28/splunk-github-wfa/.github/workflows/appinspect.yml@7ecada57ac2b19c674658e3dac9751f5b23dec13 - secrets: - API_USER: ${{ secrets.API_USER }} - API_PASS: ${{ secrets.API_PASS }} + appinspect-job: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v3 + - uses: actions/setup-python@v4 + with: + python-version: 3.7 + - name: Download packaging toolkit + run: wget https://download.splunk.com/misc/packaging-toolkit/splunk-packaging-toolkit-1.0.1.tar.gz + - name: Install packaging toolkit + run: pip install splunk-packaging-toolkit-1.0.1.tar.gz + - name: Package app + run: | + cd SA-CrowdstrikeDevices + slim package -o ~/build/package $(ls) + - name: run Appinspect + uses: splunk/appinspect-api-action@v3 + with: + username: ${{ secrets.API_USER }} + password: ${{ secrets.API_PASS }} + app_path: build/package/ + included_tags: "cloud,self-service,future" + diff --git a/.github/workflows/fossa.yml b/.github/workflows/fossa.yml index 18d161d..0ab3b61 100644 --- a/.github/workflows/fossa.yml +++ b/.github/workflows/fossa.yml @@ -6,7 +6,7 @@ on: - main - master paths: - - "src/**" + - "SA-CrowdstrikeDevices/**" types: [opened, ready_for_review] jobs: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 9f66f3f..1c476fc 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -5,8 +5,40 @@ on: - master - main paths: - - "src/**" + - "SA-CrowdstrikeDevices/**" jobs: - call-packaging-workflow: - uses: ZachChristensen28/splunk-github-wfa/.github/workflows/package-app.yml@154fb6bd5201e90183c99b40661cb931d61781b4 + package: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v3 + - uses: actions/setup-python@v4 + with: + python-version: 3.7 + - name: Download packaging toolkit + run: wget https://download.splunk.com/misc/packaging-toolkit/splunk-packaging-toolkit-1.0.1.tar.gz + - name: Install packaging toolkit + run: pip install splunk-packaging-toolkit-1.0.1.tar.gz + - name: Package app + id: app + run: | + cd src + slim package -o ~/build/packages $(ls) + echo "app=$(realpath ~/build/packages/*)" >> $GITHUB_OUTPUT + cd ~/build/packages + md5sum $(ls) > $(ls).md5 + echo "md5=$(realpath ~/build/packages/*.md5)" >> $GITHUB_OUTPUT + - name: Get info + id: info + run: | + echo "version=$(cat src/*/app.manifest | jq -r .info.id.version)" >> $GITHUB_OUTPUT + echo "name=$(cat src/*/app.manifest | jq -r .info.id.name)" >> $GITHUB_OUTPUT + - name: Draft Release + uses: softprops/action-gh-release@v1 + with: + draft: true + name: ${{ steps.info.outputs.name }} v${{ steps.info.outputs.version }} + tag_name: v${{ steps.info.outputs.version }} + files: | + ${{ steps.app.outputs.app }} + ${{ steps.app.outputs.md5 }} \ No newline at end of file diff --git a/README.md b/README.md index 15f97be..d7a5a6a 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,3 @@ -# CrowdStrike Devices for Splunk Enterprise Security - [![License](https://img.shields.io/badge/License-Splunk%20General%20Terms-ce0070)](https://www.splunk.com/en_us/legal/splunk-general-terms.html) [![Docs](https://github.com/splunk/SA-CrowdstrikeDevices/actions/workflows/docs.yml/badge.svg)](splunk.github.io/SA-CrowdstrikeDevices/) ![Appinspect](https://github.com/splunk/SA-CrowdstrikeDevices/actions/workflows/appinspect.yml/badge.svg) @@ -9,12 +7,14 @@ [![CrowdStrike Add-on Compatibility](https://img.shields.io/badge/CrowdStrike%20Addon%20Compatibility-3.x-success)](https://splunkbase.splunk.com/app/5570) ![Splunk Cloud Compatibility](https://img.shields.io/badge/Splunk%20Cloud%20Ready-Victoria%20|%20Classic-informational?logo=splunk) [![FOSSA Status](https://app.fossa.com/api/projects/git%2Bgithub.com%2FZachChristensen28%2FSA-CrowdstrikeDevices.svg?type=small)](https://app.fossa.com/projects/git%2Bgithub.com%2FZachChristensen28%2FSA-CrowdstrikeDevices?ref=badge_small) +![Splunkbase Downloads](https://img.shields.io/endpoint?color=%23&style=flat-square&url=https%3A%2F%2Fsplunkbasebadge.livehybrid.com%2Fv1%2Fdownloads%2F6573) +
+

CrowdStrike Devices for Splunk Enterprise Security

+

This supporting add-on comes with prebuilt content for CrowdStrike device data to be easily used with Splunk Enterprise Security's asset database.

+
-This supporting add-on comes with prebuilt content for CrowdStrike device data to be easily used with Splunk Enterprise Security's asset database. - -```markdown -** This supporting add-on is only intended to work with Splunk Enterprise Security deployments ** -``` +> [!IMPORTANT] +> This supporting add-on is only intended to work with Splunk Enterprise Security deployments ## Documentation @@ -28,7 +28,7 @@ Full documentation can be found at [https://splunk.github.io/SA-CrowdstrikeDevic Info | Description ------|---------- -SA-CrowdstrikeDevices | 1.1.1 - [Splunkbase](https://splunkbase.splunk.com/app/6573/) +SA-CrowdstrikeDevices | 1.1.2 - [Splunkbase](https://splunkbase.splunk.com/app/6573/) Splunk Enterprise Security Version (Required) | [7.x \| 6.x](https://splunkbase.splunk.com/app/263) CrowdStrike Devices Add-on (Required) | [3.x](https://splunkbase.splunk.com/app/5570) Add-on has a web UI | No, this add-on does not contain views. diff --git a/src/SA-CrowdstrikeDevices/README.txt b/SA-CrowdstrikeDevices/README.txt similarity index 100% rename from src/SA-CrowdstrikeDevices/README.txt rename to SA-CrowdstrikeDevices/README.txt diff --git a/src/SA-CrowdstrikeDevices/app.manifest b/SA-CrowdstrikeDevices/app.manifest similarity index 98% rename from src/SA-CrowdstrikeDevices/app.manifest rename to SA-CrowdstrikeDevices/app.manifest index 77855d8..dc341b7 100644 --- a/src/SA-CrowdstrikeDevices/app.manifest +++ b/SA-CrowdstrikeDevices/app.manifest @@ -5,7 +5,7 @@ "id": { "group": null, "name": "SA-CrowdstrikeDevices", - "version": "1.1.1" + "version": "1.1.2" }, "author": [ { diff --git a/src/SA-CrowdstrikeDevices/default/app.conf b/SA-CrowdstrikeDevices/default/app.conf similarity index 84% rename from src/SA-CrowdstrikeDevices/default/app.conf rename to SA-CrowdstrikeDevices/default/app.conf index f140322..2077ef7 100644 --- a/src/SA-CrowdstrikeDevices/default/app.conf +++ b/SA-CrowdstrikeDevices/default/app.conf @@ -3,12 +3,9 @@ # To make changes, copy the section/stanza you want to change from ./default # into ../local and edit there. -[author=ZachTheSplunker] -email = zach@zachthesplunker.com - [id] name = SA-CrowdstrikeDevices -version = 1.1.1 +version = 1.1.2 [install] state_change_requires_restart = false @@ -17,9 +14,8 @@ state = enabled build = 10 [launcher] -author = ZachTheSplunker description = This supporting add-on allows device information pulled from CrowdStrike to be used with Splunk Enterprise Security's Asset Database. -version = 1.1.1 +version = 1.1.2 [ui] is_visible = 0 diff --git a/src/SA-CrowdstrikeDevices/default/collections.conf b/SA-CrowdstrikeDevices/default/collections.conf similarity index 100% rename from src/SA-CrowdstrikeDevices/default/collections.conf rename to SA-CrowdstrikeDevices/default/collections.conf diff --git a/src/SA-CrowdstrikeDevices/default/inputs.conf b/SA-CrowdstrikeDevices/default/inputs.conf similarity index 100% rename from src/SA-CrowdstrikeDevices/default/inputs.conf rename to SA-CrowdstrikeDevices/default/inputs.conf diff --git a/src/SA-CrowdstrikeDevices/default/macros.conf b/SA-CrowdstrikeDevices/default/macros.conf similarity index 100% rename from src/SA-CrowdstrikeDevices/default/macros.conf rename to SA-CrowdstrikeDevices/default/macros.conf diff --git a/src/SA-CrowdstrikeDevices/default/managed_configurations.conf b/SA-CrowdstrikeDevices/default/managed_configurations.conf similarity index 100% rename from src/SA-CrowdstrikeDevices/default/managed_configurations.conf rename to SA-CrowdstrikeDevices/default/managed_configurations.conf diff --git a/src/SA-CrowdstrikeDevices/default/savedsearches.conf b/SA-CrowdstrikeDevices/default/savedsearches.conf similarity index 100% rename from src/SA-CrowdstrikeDevices/default/savedsearches.conf rename to SA-CrowdstrikeDevices/default/savedsearches.conf diff --git a/src/SA-CrowdstrikeDevices/default/transforms.conf b/SA-CrowdstrikeDevices/default/transforms.conf similarity index 100% rename from src/SA-CrowdstrikeDevices/default/transforms.conf rename to SA-CrowdstrikeDevices/default/transforms.conf diff --git a/src/SA-CrowdstrikeDevices/metadata/default.meta b/SA-CrowdstrikeDevices/metadata/default.meta similarity index 100% rename from src/SA-CrowdstrikeDevices/metadata/default.meta rename to SA-CrowdstrikeDevices/metadata/default.meta diff --git a/docs/index.md b/docs/index.md index db48fb9..67b6fb8 100644 --- a/docs/index.md +++ b/docs/index.md @@ -27,7 +27,7 @@ This documentation assumes the following: Info | Description ------|---------- -SA-CrowdstrikeDevices | 1.1.1 - [Splunkbase :icon-link-external:](https://splunkbase.splunk.com/app/6573){ target="blank" } +SA-CrowdstrikeDevices | 1.1.2 - [Splunkbase :icon-link-external:](https://splunkbase.splunk.com/app/6573){ target="blank" } Splunk Enterprise Security Version (Required) | [7.x \| 6.x :icon-link-external:](https://splunkbase.splunk.com/app/263){ target="blank" } CrowdStrike Devices Add-on (Required) | [3.x :icon-link-external:](https://splunkbase.splunk.com/app/5570){ target="blank" } Add-on has a web UI | No, this add-on does not contain views. diff --git a/docs/releases/index.md b/docs/releases/index.md index 5114c72..bfe8466 100644 --- a/docs/releases/index.md +++ b/docs/releases/index.md @@ -8,7 +8,18 @@ label: Releases Latest release can be found on [Splunkbase :icon-link-external:](https://splunkbase.splunk.com/app/6573){ target="blank" }. -## v1.1.1 [!badge text="LATEST" variant="info"] +## v1.1.2 [!badge text="LATEST" variant="info"] + +Released: December 1, 2023 + ++++ New :icon-shield-check: +- [x] SplunkWorks updates + +This release has no functional changes of the add-on. + +--- + +## v1.1.1 Released: April 19, 2023 diff --git a/docs/retype.yml b/docs/retype.yml index 1f15cd9..3918a78 100644 --- a/docs/retype.yml +++ b/docs/retype.yml @@ -3,7 +3,7 @@ output: .retype url: splunk.github.io/SA-CrowdstrikeDevices/ branding: title: SA-CrowdstrikeDevices - label: v1.1.1 + label: v1.1.2 colors: label: text: "#fff" diff --git a/src/SA-CrowdstrikeDevices/static/appIcon.png b/src/SA-CrowdstrikeDevices/static/appIcon.png deleted file mode 100644 index d452616..0000000 Binary files a/src/SA-CrowdstrikeDevices/static/appIcon.png and /dev/null differ diff --git a/src/SA-CrowdstrikeDevices/static/appIcon_2x.png b/src/SA-CrowdstrikeDevices/static/appIcon_2x.png deleted file mode 100644 index b71a524..0000000 Binary files a/src/SA-CrowdstrikeDevices/static/appIcon_2x.png and /dev/null differ diff --git a/src/SA-CrowdstrikeDevices/static/appLogo.png b/src/SA-CrowdstrikeDevices/static/appLogo.png deleted file mode 100644 index 47aa71e..0000000 Binary files a/src/SA-CrowdstrikeDevices/static/appLogo.png and /dev/null differ diff --git a/src/SA-CrowdstrikeDevices/static/appLogo_2x.png b/src/SA-CrowdstrikeDevices/static/appLogo_2x.png deleted file mode 100644 index 7ed860f..0000000 Binary files a/src/SA-CrowdstrikeDevices/static/appLogo_2x.png and /dev/null differ