{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":25009012,"defaultBranch":"main","name":"santa","ownerLogin":"google","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2014-10-09T21:18:31.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/1342004?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1714578255.0","currentOid":""},"activityList":{"items":[{"before":"53a2bbdd1e28322b9ef1aa4cc855219bea7c7b1b","after":"a42dd6e120da2a983f68d57b9f760ab06cca1588","ref":"refs/heads/main","pushedAt":"2024-06-03T17:41:25.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"santad: Add signal auth to tamper resistence. (#1360)\n\nPrior to this change, root users could kill the com.google.santa.daemon process. \r\nIt would be immediately restarted by sysextd but this opens a very brief\r\nwindow where protection is lost. Hooking AUTH_SIGNAL and blocking all\r\nsignals to the santad process except those sent by launchd lets us block\r\nthis without breaking upgrades, reboots, etc.\r\n\r\nThis leaves `launchctl kill` and friends as an avenue, so we're also\r\nhooking for exec and blocking executions of launchctl that reference\r\ncom.google.santa.daemon except in known safe cases.","shortMessageHtmlLink":"santad: Add signal auth to tamper resistence. (#1360)"}},{"before":"e417d8847f06fb40806cdf504179b57a381e5199","after":"53a2bbdd1e28322b9ef1aa4cc855219bea7c7b1b","ref":"refs/heads/main","pushedAt":"2024-05-30T16:29:00.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"docs: Document new EventDetailURL keys (#1361)","shortMessageHtmlLink":"docs: Document new EventDetailURL keys (#1361)"}},{"before":"a23b67d5ded080ca251e85067445a190b15bacb6","after":"e417d8847f06fb40806cdf504179b57a381e5199","ref":"refs/heads/main","pushedAt":"2024-05-30T14:10:36.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"Project: Update check-markdown workflow to use Lychee (#1362)","shortMessageHtmlLink":"Project: Update check-markdown workflow to use Lychee (#1362)"}},{"before":"7502bc247fab5b3efaf4b4719736f410c2881755","after":"a23b67d5ded080ca251e85067445a190b15bacb6","ref":"refs/heads/main","pushedAt":"2024-05-29T18:22:49.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"sync: Add a protobuf for the existing sync protocol (#1359)\n\nThis PR is intended to have no impact on existing sync servers. The fields and enum values in the protobuf have been named such that their JSON equivalents match the existing constants we have in the codebase.\r\n\r\nAdding this provides a few benefits:\r\n\r\n1. The protobuf serves as canonical documentation of the protocol in a form that's much easier to read than the existing code.\r\n2. Protobuf parsing of JSON is likely to be better than our hand-written version.\r\n3. We can (in a later PR) add a configuration option to use binary encoding instead of JSON, saving network during syncs.\r\n4. Servers written in other languages are easier to write and update as time goes on, especially as we extend the protocol.","shortMessageHtmlLink":"sync: Add a protobuf for the existing sync protocol (#1359)"}},{"before":"cf4dab55e07474f50bdcca6570145eebc0c5aeeb","after":"7502bc247fab5b3efaf4b4719736f410c2881755","ref":"refs/heads/main","pushedAt":"2024-05-21T16:48:48.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"santactl/fileinfo: Include teamID/platform prefix in signing ID (#1356)","shortMessageHtmlLink":"santactl/fileinfo: Include teamID/platform prefix in signing ID (#1356)"}},{"before":"e43ad30d4ee6b318dbd4546d80a3b028124d66f2","after":"cf4dab55e07474f50bdcca6570145eebc0c5aeeb","ref":"refs/heads/main","pushedAt":"2024-05-21T16:48:27.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"santactl/rule: Allow adding signing ID and team ID rules by file path (#1357)","shortMessageHtmlLink":"santactl/rule: Allow adding signing ID and team ID rules by file path ("}},{"before":"d8928ac3206a19913e7e66b37e067c160d6b8554","after":"e43ad30d4ee6b318dbd4546d80a3b028124d66f2","ref":"refs/heads/main","pushedAt":"2024-05-21T15:35:07.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"mlw","name":"Matt W","path":"/mlw","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/436037?s=80&v=4"},"commit":{"message":"Fix NSSecureCoding adoption in SNTFileAccessEvent (#1358)","shortMessageHtmlLink":"Fix NSSecureCoding adoption in SNTFileAccessEvent (#1358)"}},{"before":"ac1c9d8b05332fb9c561bb697909b5155de31ab5","after":"d8928ac3206a19913e7e66b37e067c160d6b8554","ref":"refs/heads/main","pushedAt":"2024-05-20T14:45:36.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"Add cdhash, teamID, and signingID to bundle events (#1353)\n\nFix #1352","shortMessageHtmlLink":"Add cdhash, teamID, and signingID to bundle events (#1353)"}},{"before":"9b184ed4fb9e4e720699b905f7b04f5c7b5cf018","after":"ac1c9d8b05332fb9c561bb697909b5155de31ab5","ref":"refs/heads/main","pushedAt":"2024-05-17T16:15:49.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"mlw","name":"Matt W","path":"/mlw","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/436037?s=80&v=4"},"commit":{"message":"Fix stat metrics accounting. Refactor setting metrics to be more general. (#1354)","shortMessageHtmlLink":"Fix stat metrics accounting. Refactor setting metrics to be more gene…"}},{"before":"67883c5200ee22410086cbf0581be7c1c96d50d8","after":"9b184ed4fb9e4e720699b905f7b04f5c7b5cf018","ref":"refs/heads/main","pushedAt":"2024-05-16T20:13:29.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"mlw","name":"Matt W","path":"/mlw","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/436037?s=80&v=4"},"commit":{"message":"Add metric for when the file on disk is not the file being evaluated (#1348)\n\n* Add metrics for stat change detection\r\n\r\n* Fix test related issues due to partially constructed messages\r\n\r\n* lint\r\n\r\n* Convert errno to enum class StatResult\r\n\r\n* Cleanup from PR feedback","shortMessageHtmlLink":"Add metric for when the file on disk is not the file being evaluated (#…"}},{"before":"8e1e155c23a4725bb16c4fd0ee0235185c5321e6","after":"67883c5200ee22410086cbf0581be7c1c96d50d8","ref":"refs/heads/main","pushedAt":"2024-05-15T20:27:28.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"GUI: Fix unicode rendering of attributed messages (#1351)\n\nAlso added a test to stop this from happening again","shortMessageHtmlLink":"GUI: Fix unicode rendering of attributed messages (#1351)"}},{"before":"fb6aa850b3477bad81026e9cb2c6d69655a602ce","after":"8e1e155c23a4725bb16c4fd0ee0235185c5321e6","ref":"refs/heads/main","pushedAt":"2024-05-15T18:05:58.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"Project: Re-enable layering_checks (#1350)","shortMessageHtmlLink":"Project: Re-enable layering_checks (#1350)"}},{"before":"7f06b8c11a817dc15c4a7d9d8573ff51dcd429f5","after":"fb6aa850b3477bad81026e9cb2c6d69655a602ce","ref":"refs/heads/main","pushedAt":"2024-05-15T15:53:31.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"santad: Drop QoS of notify handling queue (#1349)\n\nBumping from BACKGROUND to DEFAULT had the desired impact of processing events faster and reducing memory usage but had a larger-than-expected increase in CPU usage. UTILITY is in the middle of these two and better fits the desired priority.","shortMessageHtmlLink":"santad: Drop QoS of notify handling queue (#1349)"}},{"before":"978b33e45016283cf3689e945a351af246992e6e","after":"7f06b8c11a817dc15c4a7d9d8573ff51dcd429f5","ref":"refs/heads/main","pushedAt":"2024-05-14T17:06:45.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"Docs: Minor grammar & correctness fixes in known-limitations.md. (#1345)","shortMessageHtmlLink":"Docs: Minor grammar & correctness fixes in known-limitations.md. (#1345)"}},{"before":"f00ad32edd3762f9c5938ffd684fe084feb24686","after":"978b33e45016283cf3689e945a351af246992e6e","ref":"refs/heads/main","pushedAt":"2024-05-10T17:40:19.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"mlw","name":"Matt W","path":"/mlw","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/436037?s=80&v=4"},"commit":{"message":"Adopt --preserve-metadata flag to simplify resigning with entitlements (#1346)","shortMessageHtmlLink":"Adopt --preserve-metadata flag to simplify resigning with entitlements ("}},{"before":"7b0d2fdbb8d0934238f3866667227717b446b1c0","after":"f00ad32edd3762f9c5938ffd684fe084feb24686","ref":"refs/heads/main","pushedAt":"2024-05-09T19:44:14.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"santad: Bump QoS of notify handling queue (#1342)\n\nThe use of the background queue is a historical artifact from when Santa had its own kernel extension with separate in-kernel queues for processing AUTH & NOTIFY type events. With the move to ES and the larger number of event types that we now notify on, running at the background QoS carries a small risk that the thread processing these events is not given a chance to run often enough that the queue grows and increases memory usage.","shortMessageHtmlLink":"santad: Bump QoS of notify handling queue (#1342)"}},{"before":"1672e52b7ba8066ec0634966dc27232e3759dc84","after":"7b0d2fdbb8d0934238f3866667227717b446b1c0","ref":"refs/heads/main","pushedAt":"2024-05-09T19:29:17.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"Add necessary dep for SNTPolicyProcessorTest (#1343)","shortMessageHtmlLink":"Add necessary dep for SNTPolicyProcessorTest (#1343)"}},{"before":"6cca5ab27d9e2656f2e9c820f8d65641e2ea7260","after":"1672e52b7ba8066ec0634966dc27232e3759dc84","ref":"refs/heads/main","pushedAt":"2024-05-09T19:25:19.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"Project: Disable layering_check in all BUILD files (#1344)","shortMessageHtmlLink":"Project: Disable layering_check in all BUILD files (#1344)"}},{"before":"7e4af5e337467005cff80f964cc383be862249e9","after":"6cca5ab27d9e2656f2e9c820f8d65641e2ea7260","ref":"refs/heads/main","pushedAt":"2024-05-09T18:38:12.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"mlw","name":"Matt W","path":"/mlw","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/436037?s=80&v=4"},"commit":{"message":"Update SNTPolicyProcessor to use a map (#1304)\n\n* Update SNTPolicyProcessor to use a map instead of a giant switch statement\r\n\r\nUpdate SNTPolicyProcessor to use a map instead of a giant switch statement.\r\n\r\nAdd unit tests for the method that sets SNTCachedDecision values.\r\n\r\n* Remove unneccessary OCMock dep in BUILD file.\r\n\r\n* Fix typo in method signature.\r\n\r\n* Incorporate review feedback.\r\n\r\n* Upper case UpdateCachedDecisionSigningInfo\r\n\r\n* Update SNTPolicyProcessor.h\r\n\r\nCo-authored-by: Russell Hancox \r\n\r\n* Update SNTPolicyProcessor.mm\r\n\r\nCo-authored-by: Russell Hancox \r\n\r\n* Fix typo\r\n\r\n* Fix linter issues.\r\n\r\n* Fixed up more linter issues.\r\n\r\n---------\r\n\r\nCo-authored-by: Russell Hancox ","shortMessageHtmlLink":"Update SNTPolicyProcessor to use a map (#1304)"}},{"before":"5ea443190106bd1b6aea618e985f855fcbcaceb8","after":"7e4af5e337467005cff80f964cc383be862249e9","ref":"refs/heads/main","pushedAt":"2024-05-09T16:33:46.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"mlw","name":"Matt W","path":"/mlw","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/436037?s=80&v=4"},"commit":{"message":"Update to Abseil 20240116.1. Fix includes. (#1341)","shortMessageHtmlLink":"Update to Abseil 20240116.1. Fix includes. (#1341)"}},{"before":"b53818f556e2691c62e83375ce95712ab0230f66","after":"5ea443190106bd1b6aea618e985f855fcbcaceb8","ref":"refs/heads/main","pushedAt":"2024-05-08T15:50:04.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"Project: Move fuzzing rules to bzlmod, fix santa_unit_test (#1339)","shortMessageHtmlLink":"Project: Move fuzzing rules to bzlmod, fix santa_unit_test (#1339)"}},{"before":"0f5e551345bbd48e545bc20466c7cd1fefe2d90b","after":"b53818f556e2691c62e83375ce95712ab0230f66","ref":"refs/heads/main","pushedAt":"2024-05-07T13:20:50.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"tburgin","name":"Tom Burgin","path":"/tburgin","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2117646?s=80&v=4"},"commit":{"message":"SNTBlockMessage: add more template options (#1337)\n\n* update event detail url\r\n\r\n* refactor template mappings\r\n\r\n* re-enable testEventDetailURLForFileAccessEvent\r\n\r\n* null\r\n\r\n* missed one\r\n\r\n* update comment","shortMessageHtmlLink":"SNTBlockMessage: add more template options (#1337)"}},{"before":"51b0f7146def35ee1e22b4a701914aa256079bb3","after":"0f5e551345bbd48e545bc20466c7cd1fefe2d90b","ref":"refs/heads/main","pushedAt":"2024-05-06T20:47:32.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"Project: Fix lint.sh to bubble up all errors, switch from pylint to pyink, fix existing lint errors (#1338)","shortMessageHtmlLink":"Project: Fix lint.sh to bubble up all errors, switch from pylint to p…"}},{"before":"f5882b3146f4a5b4ad2efe1200b633c685aa6316","after":"51b0f7146def35ee1e22b4a701914aa256079bb3","ref":"refs/heads/main","pushedAt":"2024-05-06T13:10:04.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"mlw","name":"Matt W","path":"/mlw","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/436037?s=80&v=4"},"commit":{"message":"Testing: update E2E to use JIT runners (#1335)\n\n* inject jit runner token into e2e vm\r\n\r\n* split out vm updating\r\n\r\n* argparse + logging\r\n\r\n* restore update/start vm steps\r\n\r\n* pr review comments\r\n\r\n* rm gcp.json and verify runner sha","shortMessageHtmlLink":"Testing: update E2E to use JIT runners (#1335)"}},{"before":"d6c73e0c6cfcffcad1ac9fc849624bd4a40a03b4","after":null,"ref":"refs/heads/Update-CI-to-run-on-macos","pushedAt":"2024-05-01T15:44:15.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"mlw","name":"Matt W","path":"/mlw","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/436037?s=80&v=4"}},{"before":"59c146b4af1ed92c261eeea1367d7f34018c82f9","after":"f5882b3146f4a5b4ad2efe1200b633c685aa6316","ref":"refs/heads/main","pushedAt":"2024-04-30T16:58:35.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"docs: Fix grammar and typo in syncing-overview","shortMessageHtmlLink":"docs: Fix grammar and typo in syncing-overview"}},{"before":"aaa2b0e2591fdf5efa6dc3db614e862da03ad750","after":"59c146b4af1ed92c261eeea1367d7f34018c82f9","ref":"refs/heads/main","pushedAt":"2024-04-30T16:25:53.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"README: Fix typo in landing page (#1332)","shortMessageHtmlLink":"README: Fix typo in landing page (#1332)"}},{"before":"9c6fd0677fd4a79ecd805bcb49e7aca5e0ef74d2","after":"aaa2b0e2591fdf5efa6dc3db614e862da03ad750","ref":"refs/heads/main","pushedAt":"2024-04-29T21:23:40.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"Docs: Grammar updates on doc index","shortMessageHtmlLink":"Docs: Grammar updates on doc index"}},{"before":"344a35aaf63c24a56f7a021ce18ecab090584da3","after":"9c6fd0677fd4a79ecd805bcb49e7aca5e0ef74d2","ref":"refs/heads/main","pushedAt":"2024-04-29T19:53:53.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"README: Minor grammar issue fix (#1329)","shortMessageHtmlLink":"README: Minor grammar issue fix (#1329)"}},{"before":"45e36fa5014930eb5e73493c9c1df70ea638c877","after":"344a35aaf63c24a56f7a021ce18ecab090584da3","ref":"refs/heads/main","pushedAt":"2024-04-11T21:19:30.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"russellhancox","name":"Russell Hancox","path":"/russellhancox","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/69123?s=80&v=4"},"commit":{"message":"Project: Migrate to bazel modules (#1324)\n\nThis includes updating to rules_apple 3.5.1 and protobuf 26.1, as well as updating several tests to no longer use the data attribute to pass in testdata.","shortMessageHtmlLink":"Project: Migrate to bazel modules (#1324)"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEWziZ-wA","startCursor":null,"endCursor":null}},"title":"Activity · google/santa"}