ge-aerospace/shopdb-flask
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

collect installed-software SBOM from endpoint agent

Browse Source 
The agent now reports installed applications from both Uninstall registry hives (64-bit and WOW6432Node) as {displayname, displayversion, publisher}, mirroring the Assess-Orchestrator applications collection. Registry-only, no Win32_Product/WMIC self-repair and no AppX. The server logs it as an unpersisted key until the SBOM store is built.
This commit is contained in:
benjamin.baker
2026-08-29 17:26:32 -04:00
parent d89682fd27
commit b70cc1f6be
3 changed files with 77 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
plugins/endpoints/tests/test_plugin.py
View File

@@ -182,7 +182,8 @@ def test_new_hardware_telemetry_keys_are_logged_not_silently_known():
rather than dropping them silently."""
from plugins.endpoints.plugin import KNOWN_PAYLOAD_KEYS
for key in ('disks', 'bios', 'memory', 'processor', 'osinfo', 'domain'):
for key in ('disks', 'bios', 'memory', 'processor', 'osinfo', 'domain',
'applications'):
assert key not in KNOWN_PAYLOAD_KEYS