Skip to content

Add ProgramIconChecksums table#2402

Merged
cesarfda merged 2 commits intomainfrom
kolide_program_icon_checksums
Aug 29, 2025
Merged

Add ProgramIconChecksums table#2402
cesarfda merged 2 commits intomainfrom
kolide_program_icon_checksums

Conversation

@cesarfda
Copy link
Contributor

This pull request introduces a new osquery table for Windows called kolide_program_icon_checksums, which provides checksums for program icons without including the icon data itself. The implementation refactors existing code to support this new functionality and improves the flexibility of icon data collection.

Closes #2401

New Table Addition:

  • Added the kolide_program_icon_checksums table to the platform-specific tables for Windows, allowing users to query program icon hashes alongside program names and versions, but without the icon image data. [1] [2]

Refactoring for Data Collection:

  • Refactored the icon data generation functions (generateUninstallerProgramIcons and generateInstallersProgramIcons) to accept an includeIcon parameter, enabling reuse of logic for both tables and controlling whether icon image data is included in the results. [1] [2] [3] [4]

Implementation Details:

  • Updated the logic in both icon generation functions to conditionally include the "icon" field in the result map based on the includeIcon parameter, ensuring the correct schema for each table. [1] [2]
  • Created the generateProgramIconChecksums function to aggregate program icon hashes for the new table, leveraging the refactored icon generation functions with includeIcon set to false.

These changes improve the flexibility and maintainability of the program icon tables, allowing for both detailed icon data and lightweight checksum queries.

@cesarfda cesarfda added the component:table Table Changes label Aug 28, 2025
@cesarfda cesarfda marked this pull request as ready for review August 28, 2025 15:05
Copy link
Contributor

@RebeccaMahany RebeccaMahany left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice!!

@cesarfda cesarfda added this pull request to the merge queue Aug 29, 2025
Merged via the queue into main with commit 4b78d36 Aug 29, 2025
36 checks passed
@cesarfda cesarfda deleted the kolide_program_icon_checksums branch August 29, 2025 12:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

component:table Table Changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add kolide_program_icon_checksums table

2 participants