Skip to content

new "checked for vulnerabilities" entry#5435

Merged
noahtalerman merged 13 commits intomainfrom
xpkoala-patch-1
May 23, 2022
Merged

new "checked for vulnerabilities" entry#5435
noahtalerman merged 13 commits intomainfrom
xpkoala-patch-1

Conversation

@xpkoala
Copy link
Copy Markdown
Contributor

@xpkoala xpkoala commented Apr 28, 2022

Adding to knowledge base from #4946

Adding to knowledge base from #4946
@xpkoala xpkoala requested a review from noahtalerman April 28, 2022 14:27
Copy link
Copy Markdown
Member

@noahtalerman noahtalerman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

EDIT: Please ignore the feedback about renaming the page. We can come back and address this in a later pass.

Looking really good! I have a couple larger pieces of feedback in this comment and then several other comments and requests in comments below:

I think we can move the new section you added to the top of this documentation page (first section). This is because we expect that the user visiting this page is primarily attempting to achieve the goal of understanding the vulnerability coverage Fleet offers.

I also think it makes sense to change the title of this documentation page to "Vulnerable software."

This way, the page's title clearly communicates that Fleet offers a vulnerable software feature and not the vulnerability scanner feature set (vulnerable software, cloud configuration, networks, libraries, and dependencies) that other vuln management solutions offer.

Please check in with @eashaw on changing the title of documentation pages. I'm not sure how the links for fleetdm.com/docs react to changing the name of the markdown file.

Also, please check if this name change will result in any broken links in the Fleet product. You can do this by searching the Fleet repo for the current link: https://fleetdm.com/docs/using-fleet/vulnerability-processing

This is rocking!

Comment thread docs/Using-Fleet/Vulnerability-Processing.md Outdated
Comment thread docs/Using-Fleet/Vulnerability-Processing.md Outdated
@noahtalerman
Copy link
Copy Markdown
Member

@xpkoala please ignore my earlier piece of feedback about renaming the page. We can come back and address this in a later pass.

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
@xpkoala xpkoala temporarily deployed to Docker Hub May 10, 2022 15:52 Inactive
@xpkoala xpkoala temporarily deployed to Docker Hub May 10, 2022 16:14 Inactive
Copy link
Copy Markdown
Contributor Author

@xpkoala xpkoala left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Added suggestions from @noahtalerman

Copy link
Copy Markdown
Member

@noahtalerman noahtalerman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looking sweet. I left a couple suggested changes below.

Comment thread docs/Using-Fleet/Vulnerability-Processing.md Outdated
Comment thread docs/Using-Fleet/Vulnerability-Processing.md Outdated
@noahtalerman
Copy link
Copy Markdown
Member

@xpkoala heads up, I left a couple suggested changes above.

1 similar comment
@noahtalerman
Copy link
Copy Markdown
Member

@xpkoala heads up, I left a couple suggested changes above.

Rename and move Coverage section to second listing.
@xpkoala xpkoala temporarily deployed to Docker Hub May 13, 2022 15:37 Inactive
@xpkoala xpkoala temporarily deployed to Docker Hub May 13, 2022 15:37 Inactive
Copy link
Copy Markdown
Contributor Author

@xpkoala xpkoala left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Renamed and moved Coverage section to be higher in the document.

Copy link
Copy Markdown
Member

@noahtalerman noahtalerman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looking good!

@chiiph I added you as a reviewer. Can you please review these changes for accuracy? By accuracy, I mean "does Fleet currently detect vulnerabilities for all these software items?"

Thanks :)

@xpkoala please feel free to merge once Tomas gets a chance to review.

@noahtalerman noahtalerman requested a review from chiiph May 16, 2022 15:51
Copy link
Copy Markdown
Member

@noahtalerman noahtalerman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@xpkoala this is looking really good. I left several more requested changes below.

Comment thread docs/Using-Fleet/Vulnerability-Processing.md Outdated
Comment thread docs/Using-Fleet/Vulnerability-Processing.md Outdated
Comment thread docs/Using-Fleet/Vulnerability-Processing.md Outdated
Comment thread docs/Using-Fleet/Vulnerability-Processing.md Outdated
Comment thread docs/Using-Fleet/Vulnerability-Processing.md Outdated
Comment thread docs/Using-Fleet/Vulnerability-Processing.md Outdated
Comment thread docs/Using-Fleet/Vulnerability-Processing.md Outdated
Comment thread docs/Using-Fleet/Vulnerability-Processing.md Outdated
Comment thread docs/Using-Fleet/Vulnerability-Processing.md Outdated
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
@xpkoala xpkoala temporarily deployed to Docker Hub May 17, 2022 15:45 Inactive
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
@xpkoala xpkoala temporarily deployed to Docker Hub May 17, 2022 15:46 Inactive
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
@xpkoala xpkoala temporarily deployed to Docker Hub May 17, 2022 15:46 Inactive
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
@xpkoala xpkoala temporarily deployed to Docker Hub May 17, 2022 15:47 Inactive
@xpkoala xpkoala temporarily deployed to Docker Hub May 17, 2022 15:56 Inactive
Copy link
Copy Markdown
Contributor Author

@xpkoala xpkoala left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Changed software to packages and other minor fixes.

@xpkoala xpkoala temporarily deployed to Docker Hub May 19, 2022 16:14 Inactive
@xpkoala xpkoala requested a review from noahtalerman May 19, 2022 16:14
- RPM
- Atom
- Python
- Packages installed using APT (Debian)
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is the same as deb.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The only reason "Packages installed using YUM (Red Hat)" is in here is because we thought the query Fleet runs to collect software includes the apt_sources table. This is not the case.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

apt_sources lists the repositories APT uses, not the packages.

- Python
- Packages installed using APT (Debian)
- Packages installed using Portage (Gentoo)
- Packages installed using YUM (Red Hat)
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is the same as RPM.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@chiiph great catch.

The only reason "Packages installed using YUM (Red Hat)" is in here is because we thought the query Fleet runs to collect software includes the yum_sources table. This is not the case.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yum_sources iiuc lists the respositories, not the packages.

chiiph
chiiph previously approved these changes May 19, 2022
Copy link
Copy Markdown
Contributor

@chiiph chiiph left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, just left a couple of comments that were technically redundant.

Copy link
Copy Markdown
Member

@noahtalerman noahtalerman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@xpkoala I added two more requested changes following feedback from Tomas.

Pumped to get this merged today!

Comment thread docs/Using-Fleet/Vulnerability-Processing.md Outdated
Comment thread docs/Using-Fleet/Vulnerability-Processing.md Outdated
@noahtalerman noahtalerman temporarily deployed to Docker Hub May 23, 2022 20:16 Inactive
@noahtalerman noahtalerman temporarily deployed to Docker Hub May 23, 2022 20:16 Inactive
@Desmi-Dizney
Copy link
Copy Markdown
Contributor

Editor pass completed on:

noahtalerman pushed a commit that referenced this pull request May 31, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants