All pull requests

Pull requests

• check registry value size before decoding fixed-width types in queryKey

  ready for reviewsecurityvirtual tablesWindows
  #9220·Sahana2524 opened Oct 24, 2026Contributor·3 of 6 tasks·

  ·
  1

• scheduler: record query performance when numeric monitoring is enabled

  bugperformanceready for review
  #9219·mike-myers-aapl opened Oct 24, 2026Contributor·

  ·
  1

• guard truncated drive fields in driveLetterItem and propertyViewDrive

  ready for reviewsecurityvirtual tablesWindows
  #9218·Sahana2524 opened Oct 23, 2026Contributor·5 of 6 tasks·

  ·

• cleanup: remove deprecated space in operator""_sz

  build
  #9217·stefanamaerz opened Oct 23, 2026Contributor·

  ·
  2

• stop building a regex from the exe path in deletedMatchesInode

  bugvirtual tables
  #9216·Sahana2524 opened Oct 23, 2026Contributor·4 of 6 tasks·

  ·
  1

• Automatically keep the certs.pem file updated

  CI/CDready for reviewsecurity
  #9214·directionless opened Oct 23, 2026Member·

  ·
  3

• Remove per-run full scans and rewrites from the scheduler and database hot paths

  coredatabaseperformanceready for review
  #9213·0x000NULL opened Oct 22, 2026Contributor·

  ·

• genwebsitejson: list sleuthkit tables as supported on Windows

  documentationwebsite
  #9212·lucasmrod opened Oct 22, 2026Contributor·

  ·
  6

• Limit decompressed JetBrains plugin metadata size

  ready for reviewsecurityvirtual tables
  #9211·Rikuxx0 opened Oct 22, 2026·

  ·
  1

• Fix Linux Audit argv reconstruction

  Linuxready for review
  #9208·mjatin2007 opened Oct 21, 2026Contributor·

  ·
  3

• Fix deadlock with config updates and queries to osquery_schedule

  bugcore
  #9207·zwass opened Oct 21, 2026Member·

  ·
  1

  5

• Add Actions workflow to update certs.pem

  CI/CDgithub_actions
  #9205·zwass opened Oct 21, 2026Member·

  ·
  1

  9

• startup_items: read per-user BTM archives on macOS 27

  macOSvirtual tables
  #9198·nulmete opened Oct 19, 2026Contributor·7 tasks done·

  ·
  2

  1

• Synchronize custom flag map access

  coreready for review
  #9195·mjatin2007 opened Oct 18, 2026Contributor·

  ·
  1

• stop descending a BOM paths node with no indices in genPackageBOM

  macOSneeds responsesecurityvirtual tables
  #9190·Sahana2524 opened Oct 15, 2026Contributor·4 tasks done·

  ·
  8

• Add Linux containerd tables (via a vendored gRPC/protobuf client)

  containersLinuxvirtual tables
  #9180·a-cognet opened Oct 13, 2026Contributor·

  ·
  2

• filesystem: revert readFile refactor (#8410)

  performanceready for review
  #9179·a-cognet opened Oct 13, 2026Contributor·

  ·
  1

• rpm_packages: revert query-context IN optimization (#8537)

  Linuxperformanceready for reviewvirtual tables
  #9178·a-cognet opened Oct 13, 2026Contributor·

  ·
  2

• config: Fix deadlock between config updates and queries of osquery_schedule

  coreready for reviewtest
  #9174·mike-myers-aapl opened Oct 12, 2026Contributor·

  ·
  1

  15

• rpm_packages: serialize librpm global state with a shared mutex

  Linuxready for reviewvirtual tables
  #9173·a-cognet opened Oct 12, 2026Contributor·

  ·
  5

• docs: clarify invalid configuration startup behavior

  documentationneeds CLA
  #9169·nightcityblade opened Oct 10, 2026·6 tasks done·

  ·
  1

  2

• os_version: fix Oracle Linux platform and Amazon Linux version

  Linuxneeds CLAvirtual tables
  #9162·a-cognet opened Oct 9, 2026Contributor·

  ·
  1

  5

• Move to using Artifacts for compiler caches

  CI/CDgithub_actions
  #9157·zwass opened Oct 9, 2026Member·

  ·
  5

• Slim down AWS SDKs

  AWSbuild
  #9123·zwass opened Sep 30, 2026Member·

  ·
  11

• Fix scheduled_tasks hidden state on Windows

  bugneeds responsevirtual tablesWindows
  #9119·a-bonfim-tech opened Sep 26, 2026·

  ·
  1

  4