Add Osquery query tag

zentralopensource · Oct 17, 2023 · 3a62d82 · 3a62d82
1 parent 23b9ae7
commit 3a62d82
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 1 deletion.
diff --git a/goztl.go b/goztl.go
@@ -15,7 +15,7 @@ import (
 )
 
 const (
-	libraryVersion = "0.1.39"
+	libraryVersion = "0.1.40"
 	userAgent      = "goztl/" + libraryVersion
 	mediaType      = "application/json"
 )

diff --git a/osquery_queries.go b/osquery_queries.go
@@ -49,6 +49,7 @@ type OsqueryQuery struct {
 	Value                  string                  `json:"value"`
 	Version                int                     `json:"version"`
 	ComplianceCheckEnabled bool                    `json:"compliance_check_enabled"`
+	TagID                  *int                    `json:"tag"`
 	Scheduling             *OsqueryQueryScheduling `json:"scheduling"`
 	Created                Timestamp               `json:"created_at"`
 	Updated                Timestamp               `json:"updated_at"`
@@ -77,6 +78,7 @@ type OsqueryQueryRequest struct {
 	Description            string                         `json:"description"`
 	Value                  string                         `json:"value"`
 	ComplianceCheckEnabled bool                           `json:"compliance_check_enabled"`
+	TagID                  *int                           `json:"tag"`
 	Scheduling             *OsqueryQuerySchedulingRequest `json:"scheduling"`
 }
 

diff --git a/osquery_queries_test.go b/osquery_queries_test.go
@@ -30,6 +30,7 @@ var oqListJSONResponse = `
 	    "snapshot_mode": false
 	},
 	"compliance_check_enabled": false,
+	"tag": null,
         "created_at": "2022-07-22T01:02:03.444444",
         "updated_at": "2022-07-22T01:02:03.444444"
     }
@@ -47,6 +48,7 @@ var oqGetJSONResponse = `
     "value": "A list of user attributes",
     "version": 1,
     "compliance_check_enabled": false,
+    "tag": 17,
     "scheduling": null,
     "created_at": "2022-07-22T01:02:03.444444",
     "updated_at": "2022-07-22T01:02:03.444444"
@@ -65,6 +67,7 @@ var oqCreateJSONResponse = `
     "version": 1,
     "scheduling": null,
     "compliance_check_enabled": false,
+    "tag": 17,
     "created_at": "2022-07-22T01:02:03.444444",
     "updated_at": "2022-07-22T01:02:03.444444"
 }
@@ -81,6 +84,7 @@ var oqUpdateJSONResponse = `
     "value": "A list of user attributes",
     "version": 1,
     "compliance_check_enabled": false,
+    "tag": null,
     "scheduling": {
 	"can_be_denylisted": true,
 	"interval": 161,
@@ -162,6 +166,7 @@ func TestOsqueryQueriesService_GetByID(t *testing.T) {
 		Value:                  "A list of user attributes",
 		Version:                1,
 		ComplianceCheckEnabled: false,
+		TagID:                  Int(17),
 		Created:                Timestamp{referenceTime},
 		Updated:                Timestamp{referenceTime},
 	}
@@ -300,6 +305,7 @@ func TestOsqueryQueriesService_Create(t *testing.T) {
 		Value:                  "A list of user attributes",
 		Version:                1,
 		ComplianceCheckEnabled: false,
+		TagID:                  Int(17),
 		Created:                Timestamp{referenceTime},
 		Updated:                Timestamp{referenceTime},
 	}