fleetdm / fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)
https://fleetdm.com
Other
2.95k stars 409 forks source link

Ability to add new software to "Other critical software" section of vulnerability dashboard #15456

Open dherder opened 9 months ago

dherder commented 9 months ago

Right now, only 2 software titles are displayed in the Patch progress> Other critical software section (Microsoft office and Flash). Customers need the ability to add whatever software title they like to this section.

Problem

Without the ability to customize the "Other critical software" patch compliance section, the solution is too restrictive.

Potential solutions

Create an "Add new" link in the "Other critical software" section so that the admin can add additional critical software to track.

mike-j-thomas commented 9 months ago

From @rachaelshaw:

Right now the "Other critical software" is hardcoded & not customizable, but could make a feature request to add a new one to the list

Just a heads up: because of the way it's built, I think it'd be a lot easier to prioritize adding a new specific (hardcoded) type of software to that section versus making it completely open-ended. (Like, the logic for determining what software falls under "Microsoft office" is kinda complex iirc; everything on that page is pretty custom)

mike-j-thomas commented 9 months ago

@dherder, based on @rachaelshaw's comments, are there any specific software items you had in mind, or is it just that giving users the ability to add their own is an ideal experience?

mike-j-thomas commented 9 months ago

Unless I hear otherwise from Feature Fest, I'm moving this to "not yet" for future prioritization.

dherder commented 9 months ago

I think if we don't give the user this ability, we're going to be chasing our tail regularly

noahtalerman commented 9 months ago

@dherder we iterate at Fleet! So we can move quickly for the customers.

A custom solution is going to be slower than getting feedback on which software they want and adding it for them.