Skip to content
Merged
Show file tree
Hide file tree
Changes from 2 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
66 changes: 33 additions & 33 deletions .github/CODEOWNERS
Original file line number Diff line number Diff line change
Expand Up @@ -39,8 +39,8 @@
/packages/atlassian_confluence @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/atlassian_cloud @elastic/integration-experience
/packages/atlassian_jira @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/auditd @elastic/sec-linux-platform
/packages/auditd_manager @elastic/sec-linux-platform
/packages/auditd @elastic/security-service-integrations
/packages/auditd_manager @elastic/security-service-integrations
/packages/auth0 @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/authentik @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/aws @elastic/obs-infraobs-integrations @elastic/obs-ds-hosted-services @elastic/security-service-integrations
Expand Down Expand Up @@ -251,8 +251,8 @@
/packages/elasticsearch @elastic/stack-monitoring
/packages/aws_elb_otel @elastic/obs-infraobs-integrations
/packages/ece @elastic/stack-monitoring
/packages/endace @elastic/integration-experience @elastic/sec-linux-platform
/packages/endace/data_stream/flow @elastic/sec-linux-platform
/packages/endace @elastic/integration-experience @elastic/security-service-integrations
/packages/endace/data_stream/flow @elastic/security-service-integrations
/packages/endace/data_stream/log @elastic/integration-experience
/packages/enterprisesearch @elastic/stack-monitoring
/packages/entityanalytics_ad @elastic/security-service-integrations @elastic/sit-crest-contractors
Expand All @@ -270,7 +270,7 @@
/packages/falco @elastic/integration-experience
/packages/filelog_otel @elastic/ecosystem
/packages/filestream @elastic/elastic-agent-data-plane
/packages/fim @elastic/sec-linux-platform
/packages/fim @elastic/security-service-integrations
/packages/fireeye @elastic/integration-experience
/packages/first_epss @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/fleet_server @elastic/fleet
Expand Down Expand Up @@ -324,7 +324,7 @@
/packages/haproxy @elastic/obs-infraobs-integrations
/packages/haproxy_otel @elastic/obs-infraobs-integrations
/packages/hashicorp_vault @elastic/integration-experience
/packages/hid_bravura_monitor @elastic/sec-windows-platform
/packages/hid_bravura_monitor @elastic/security-service-integrations
/packages/hostmetrics_input_otel @elastic/obs-infraobs-integrations
/packages/hpe_aruba_cx @elastic/integration-experience
/packages/hta @elastic/sec-applied-ml
Expand Down Expand Up @@ -381,17 +381,17 @@
/packages/lumos @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/lyve_cloud @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/m365_defender @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/macos @elastic/sec-windows-platform
/packages/macos @elastic/security-service-integrations
/packages/mattermost @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/memcached @elastic/obs-infraobs-integrations
/packages/memcached_otel @elastic/obs-infraobs-integrations
/packages/menlo @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/microsoft_defender_cloud @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/microsoft_defender_endpoint @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/microsoft_dhcp @elastic/sec-windows-platform
/packages/microsoft_dnsserver @elastic/sec-windows-platform
/packages/microsoft_dhcp @elastic/security-service-integrations
/packages/microsoft_dnsserver @elastic/security-service-integrations
/packages/microsoft_exchange_online_message_trace @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/microsoft_exchange_server @elastic/sec-windows-platform
/packages/microsoft_exchange_server @elastic/security-service-integrations
/packages/microsoft_intune @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/microsoft_sentinel @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/microsoft_sqlserver @elastic/obs-infraobs-integrations
Expand All @@ -403,7 +403,7 @@
/packages/mongodb_atlas @elastic/obs-infraobs-integrations
/packages/mongodb_otel @elastic/obs-infraobs-integrations
/packages/mysql @elastic/obs-infraobs-integrations
/packages/mysql_enterprise @elastic/sec-windows-platform
/packages/mysql_enterprise @elastic/security-service-integrations
/packages/mysql_otel @elastic/obs-infraobs-integrations
/packages/mysql_input_otel @elastic/ecosystem
/packages/nagios_xi @elastic/obs-infraobs-integrations
Expand All @@ -413,7 +413,7 @@
/packages/netflow @elastic/integration-experience
/packages/netscout @elastic/integration-experience
/packages/netskope @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/network_traffic @elastic/sec-linux-platform
/packages/network_traffic @elastic/security-service-integrations
/packages/nextron_thor @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/nginx @elastic/obs-infraobs-integrations
/packages/nginx_ingress_controller @elastic/obs-ds-hosted-services
Expand Down Expand Up @@ -441,7 +441,7 @@
/packages/oracle @elastic/obs-infraobs-integrations
/packages/oracle_otel @elastic/obs-infraobs-integrations
/packages/oracle_weblogic @elastic/obs-infraobs-integrations
/packages/osquery @elastic/sec-windows-platform
/packages/osquery @elastic/security-service-integrations
/packages/osquery_manager @elastic/security-defend-workflows
/packages/otel_collector_internal_telemetry @elastic/obs-signals-metrics-team
/packages/otlp_input_otel @elastic/ecosystem
Expand Down Expand Up @@ -525,11 +525,11 @@
/packages/synthetics_dashboards @elastic/actionable-obs-team
/packages/sysdig @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/syslog_router @elastic/integration-experience
/packages/sysmon_linux @elastic/sec-linux-platform
/packages/sysmon_linux @elastic/security-service-integrations
/packages/system @elastic/obs-infraobs-integrations
/packages/system/changelog.yml @elastic/obs-infraobs-integrations @elastic/sec-linux-platform @elastic/sec-windows-platform
/packages/system/data_stream/application @elastic/sec-windows-platform
/packages/system/data_stream/auth @elastic/sec-linux-platform
/packages/system/changelog.yml @elastic/obs-infraobs-integrations @elastic/security-service-integrations
/packages/system/data_stream/application @elastic/security-service-integrations
/packages/system/data_stream/auth @elastic/security-service-integrations
/packages/system/data_stream/core @elastic/obs-infraobs-integrations
/packages/system/data_stream/cpu @elastic/obs-infraobs-integrations
/packages/system/data_stream/diskio @elastic/obs-infraobs-integrations
Expand All @@ -541,13 +541,13 @@
/packages/system/data_stream/ntp @elastic/obs-infraobs-integrations
/packages/system/data_stream/process @elastic/obs-infraobs-integrations
/packages/system/data_stream/process_summary @elastic/obs-infraobs-integrations
/packages/system/data_stream/security @elastic/sec-windows-platform
/packages/system/data_stream/security @elastic/security-service-integrations
/packages/system/data_stream/socket_summary @elastic/obs-infraobs-integrations
/packages/system/data_stream/syslog @elastic/obs-infraobs-integrations
/packages/system/data_stream/system @elastic/obs-infraobs-integrations
/packages/system/data_stream/uptime @elastic/obs-infraobs-integrations
/packages/system/manifest.yml @elastic/obs-infraobs-integrations @elastic/sec-linux-platform @elastic/sec-windows-platform
/packages/system_audit @elastic/sec-linux-platform
/packages/system/manifest.yml @elastic/obs-infraobs-integrations @elastic/security-service-integrations
/packages/system_audit @elastic/security-service-integrations
/packages/system_otel @elastic/obs-signals-metrics-team
/packages/tanium @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/tcp @elastic/integration-experience
Expand Down Expand Up @@ -597,7 +597,7 @@
/packages/trendmicro @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/tychon @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/udp @elastic/integration-experience
/packages/unifiedlogs @elastic/sec-windows-platform
/packages/unifiedlogs @elastic/security-service-integrations
/packages/universal_profiling_agent @elastic/obs-signals-logs-team
/packages/universal_profiling_collector @elastic/obs-ds-intake-services
/packages/universal_profiling_symbolizer @elastic/obs-ds-intake-services
Expand All @@ -613,20 +613,20 @@
/packages/watchguard_firebox @elastic/integration-experience
/packages/websocket @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/websphere_application_server @elastic/obs-infraobs-integrations
/packages/windows @elastic/elastic-agent-data-plane @elastic/sec-windows-platform
/packages/windows/data_stream/applocker_exe_and_dll @elastic/sec-windows-platform
/packages/windows/data_stream/applocker_msi_and_script @elastic/sec-windows-platform
/packages/windows/data_stream/applocker_packaged_app_deployment @elastic/sec-windows-platform
/packages/windows/data_stream/applocker_packaged_app_execution @elastic/sec-windows-platform
/packages/windows/data_stream/forwarded @elastic/sec-windows-platform
/packages/windows @elastic/elastic-agent-data-plane @elastic/security-service-integrations
/packages/windows/data_stream/applocker_exe_and_dll @elastic/security-service-integrations
/packages/windows/data_stream/applocker_msi_and_script @elastic/security-service-integrations
/packages/windows/data_stream/applocker_packaged_app_deployment @elastic/security-service-integrations
/packages/windows/data_stream/applocker_packaged_app_execution @elastic/security-service-integrations
/packages/windows/data_stream/forwarded @elastic/security-service-integrations
/packages/windows/data_stream/perfmon @elastic/elastic-agent-data-plane
/packages/windows/data_stream/powershell @elastic/sec-windows-platform
/packages/windows/data_stream/powershell_operational @elastic/sec-windows-platform
/packages/windows/data_stream/powershell @elastic/security-service-integrations
/packages/windows/data_stream/powershell_operational @elastic/security-service-integrations
/packages/windows/data_stream/service @elastic/elastic-agent-data-plane
/packages/windows/data_stream/sysmon_operational @elastic/sec-windows-platform
/packages/windows/data_stream/windows_defender @elastic/sec-windows-platform
/packages/windows_etw @elastic/sec-windows-platform
/packages/winlog @elastic/sec-windows-platform
/packages/windows/data_stream/sysmon_operational @elastic/security-service-integrations
/packages/windows/data_stream/windows_defender @elastic/security-service-integrations
/packages/windows_etw @elastic/security-service-integrations
/packages/winlog @elastic/security-service-integrations
/packages/withsecure_elements @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/wiz @elastic/security-service-integrations @elastic/sit-crest-contractors
/packages/wmi @elastic/obs-infraobs-integrations
Expand Down
5 changes: 5 additions & 0 deletions packages/auditd/changelog.yml
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# later versions go on top
- version: "3.24.1"
changes:
- description: Transfer package ownership to elastic/security-service-integrations.
type: enhancement
link: https://github.com/elastic/integrations/pull/20626
- version: "3.24.0"
changes:
- description: Add `ignore_older` option to the auditd log data stream.
Expand Down
4 changes: 2 additions & 2 deletions packages/auditd/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
name: auditd
title: Auditd Logs
version: "3.24.0"
version: "3.24.1"
description: Collect logs from Linux audit daemon with Elastic Agent.
type: integration
icons:
Expand Down Expand Up @@ -29,5 +29,5 @@ policy_templates:
title: "Collect Auditd application logs (input: logfile)"
description: "Collecting application logs from Auditd instances (input: logfile)"
owner:
github: elastic/sec-linux-platform
github: elastic/security-service-integrations

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Severity: 🟠 High confidence: high path: packages/auditd/manifest.yml:32

All 16 package manifests change owner.github but none bump the package version or add a changelog entry, so the new owner never reaches the published packages. Bump each package's patch version and add a matching changelog entry.

Details

This PR edits owner.github in 16 package manifests (auditd, auditd_manager, fim, hid_bravura_monitor, macos, microsoft_dhcp, microsoft_dnsserver, microsoft_exchange_server, mysql_enterprise, network_traffic, osquery, sysmon_linux, system_audit, unifiedlogs, windows_etw, winlog) without touching a single changelog.yml or version: field — no changelog file appears in the changed-file set.

Packages are published to EPR per version. With the version unchanged, none of these manifest edits are ever released: every package already published on epr.elastic.co keeps elastic/sec-linux-platform / elastic/sec-windows-platform as its owner, even though those teams are being dissolved by this handover. Only the in-repo copy is updated.

The repo's own contribution docs require both steps for any package change (docs/extend/_publish_an_integration.md, step 2 'Add a changelog entry' and step 5 'Bump the package version appropriately'). The precedent for exactly this kind of change is consistent: merged ownership-transfer PR 17982 bumped cloud_asset_inventory and cloud_security_posture and added a 'Transfer package ownership to ...' changelog entry to each, and packages/auditd/changelog.yml already carries a 3.19.1 entry with description 'Changed owners' from a previous transfer.

I am flagging this once on auditd rather than 16 times; the same fix is needed in all 16 packages. The .github/CODEOWNERS change itself is correct and complete — no sec-linux-platform / sec-windows-platform reference remains under packages/, the manifest owner of every touched package is listed in its CODEOWNERS entry (so dev/codeowners Check() still passes), the duplicate teams on /packages/system/manifest.yml and /packages/system/changelog.yml were correctly collapsed to a single entry, and every data-stream-level entry still resolves to exactly one team.

Recommendation:

For each of the 16 packages, bump the patch version in manifest.yml and prepend a matching entry to changelog.yml. For auditd (currently 3.24.0):

# packages/auditd/manifest.yml
version: "3.24.1"
# packages/auditd/changelog.yml (top of file)
- version: "3.24.1"
  changes:
    - description: Transfer package ownership to elastic/security-service-integrations team.
      type: enhancement
      link: https://github.com/elastic/integrations/pull/20626

Repeat for auditd_manager, fim, hid_bravura_monitor, macos, microsoft_dhcp, microsoft_dnsserver, microsoft_exchange_server, mysql_enterprise, network_traffic, osquery, sysmon_linux, system_audit, unifiedlogs, windows_etw and winlog, using each package's own current version.


🤖 AI-Generated Review | Vera Review Bot | 📚 Knowledge base: integration-skills

⚠️ Automated review — verify suggestions before applying.

type: elastic
5 changes: 5 additions & 0 deletions packages/auditd_manager/changelog.yml
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.20.1"
changes:
- description: Transfer package ownership to elastic/security-service-integrations.
type: enhancement
link: https://github.com/elastic/integrations/pull/20626
- version: "1.20.0"
changes:
- description: Replace markdown navigation links with Links panels for space-aware dashboard navigation
Expand Down
4 changes: 2 additions & 2 deletions packages/auditd_manager/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
format_version: "3.0.0"
name: auditd_manager
title: "Auditd Manager"
version: "1.20.0"
version: "1.20.1"
description: "The Auditd Manager Integration receives audit events from the Linux Audit Framework that is a part of the Linux kernel."
type: integration
categories:
Expand Down Expand Up @@ -40,5 +40,5 @@ agent:
privileges:
root: true
owner:
github: elastic/sec-linux-platform
github: elastic/security-service-integrations
type: elastic
5 changes: 5 additions & 0 deletions packages/fim/changelog.yml
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.17.1"
changes:
- description: Transfer package ownership to elastic/security-service-integrations.
type: enhancement
link: https://github.com/elastic/integrations/pull/20626
- version: "1.17.0"
changes:
- description: Add 9.2.0 Kibana constraint for the `etw` backend; pin ECS definitions to 9.3.0 and set ingest `ecs.version` to 9.3.0.
Expand Down
4 changes: 2 additions & 2 deletions packages/fim/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
format_version: "3.0.0"
name: fim
title: "File Integrity Monitoring"
version: "1.17.0"
version: "1.17.1"
description: "The File Integrity Monitoring integration reports filesystem changes in real time."
type: integration
categories:
Expand Down Expand Up @@ -159,5 +159,5 @@ agent:
privileges:
root: true
owner:
github: elastic/sec-linux-platform
github: elastic/security-service-integrations
type: elastic
5 changes: 5 additions & 0 deletions packages/hid_bravura_monitor/changelog.yml
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.21.1"
changes:
- description: Transfer package ownership to elastic/security-service-integrations.
type: enhancement
link: https://github.com/elastic/integrations/pull/20626
- version: "1.21.0"
changes:
- description: Allow @custom pipeline access to event.original without setting preserve_original_event.
Expand Down
4 changes: 2 additions & 2 deletions packages/hid_bravura_monitor/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
name: hid_bravura_monitor
title: Bravura Monitor
version: "1.21.0"
version: "1.21.1"
categories: ["security", "iam"]
description: Collect logs from Bravura Security Fabric with Elastic Agent.
type: integration
Expand Down Expand Up @@ -34,7 +34,7 @@ screenshots:
size: 1904x971
type: image/png
owner:
github: elastic/sec-windows-platform
github: elastic/security-service-integrations
type: partner
format_version: "3.0.0"
policy_templates:
Expand Down
5 changes: 5 additions & 0 deletions packages/macos/changelog.yml
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.0.1"
changes:
- description: Transfer package ownership to elastic/security-service-integrations.
type: enhancement
link: https://github.com/elastic/integrations/pull/20626
- version: 1.0.0
changes:
- description: GA release. Renamed integration to macOS Security Events.
Expand Down
4 changes: 2 additions & 2 deletions packages/macos/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
format_version: 3.3.2
name: macos
title: macOS Security Events
version: 1.0.0
version: 1.0.1
description: Collect logs from macOS with Elastic Agent.
type: integration
categories:
Expand Down Expand Up @@ -34,5 +34,5 @@ policy_templates:
title: Collect unified logs from macOS Security Events
description: Collecting unified logs from macOS Security Events.
owner:
github: elastic/sec-windows-platform
github: elastic/security-service-integrations
type: elastic
5 changes: 5 additions & 0 deletions packages/microsoft_dhcp/changelog.yml
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.27.1"
changes:
- description: Transfer package ownership to elastic/security-service-integrations.
type: enhancement
link: https://github.com/elastic/integrations/pull/20626
- version: "1.27.0"
changes:
- description: Allow @custom pipeline access to event.original without setting preserve_original_event.
Expand Down
4 changes: 2 additions & 2 deletions packages/microsoft_dhcp/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
format_version: "3.0.0"
name: microsoft_dhcp
title: Microsoft DHCP
version: "1.27.0"
version: "1.27.1"
description: Collect logs from Microsoft DHCP with Elastic Agent.
type: integration
categories:
Expand All @@ -25,5 +25,5 @@ policy_templates:
title: Logs from file
description: Collect DHCP logs from file.
owner:
github: elastic/sec-windows-platform
github: elastic/security-service-integrations
type: elastic
5 changes: 5 additions & 0 deletions packages/microsoft_dnsserver/changelog.yml
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.5.2"
changes:
- description: Transfer package ownership to elastic/security-service-integrations.
type: enhancement
link: https://github.com/elastic/integrations/pull/20626
- version: "1.5.1"
changes:
- description: Remove duplicate security-solution-default tag references
Expand Down
4 changes: 2 additions & 2 deletions packages/microsoft_dnsserver/manifest.yml
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ name: microsoft_dnsserver
title: Microsoft DNS Server
description: Collect logs from Microsoft DNS Server with Elastic Agent.
type: integration
version: "1.5.1"
version: "1.5.2"
conditions:
kibana:
version: ^8.13.0 || ^9.0.0
Expand Down Expand Up @@ -36,5 +36,5 @@ icons:
size: 32x32
type: image/svg+xml
owner:
github: elastic/sec-windows-platform
github: elastic/security-service-integrations
type: elastic
5 changes: 5 additions & 0 deletions packages/microsoft_exchange_server/changelog.yml
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.5.2"
changes:
- description: Transfer package ownership to elastic/security-service-integrations.
type: enhancement
link: https://github.com/elastic/integrations/pull/20626
- version: "1.5.1"
changes:
- description: Fix flaky policy test by using unique test names per data stream to avoid "resource already exists" collisions.
Expand Down
4 changes: 2 additions & 2 deletions packages/microsoft_exchange_server/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
format_version: 3.0.3
name: microsoft_exchange_server
title: "Microsoft Exchange Server"
version: "1.5.1"
version: "1.5.2"
source:
license: "Elastic-2.0"
description: Collect logs from Microsoft Exchange Server with Elastic Agent.
Expand Down Expand Up @@ -43,5 +43,5 @@ policy_templates:
title: Collect Microsoft Exchange Server Logs from file
description: Microsoft Exchange Server Logs
owner:
github: elastic/sec-windows-platform
github: elastic/security-service-integrations
type: community
5 changes: 5 additions & 0 deletions packages/mysql_enterprise/changelog.yml
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.17.2"
changes:
- description: Transfer package ownership to elastic/security-service-integrations.
type: enhancement
link: https://github.com/elastic/integrations/pull/20626
- version: "1.17.1"
changes:
- description: Update package title and description to improve clarity of use.
Expand Down
4 changes: 2 additions & 2 deletions packages/mysql_enterprise/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
format_version: "3.0.0"
name: mysql_enterprise
title: "MySQL Enterprise (Audit Logs)"
version: "1.17.1"
version: "1.17.2"
description: Collect MySQL Enterprise audit logs for security monitoring.
type: integration
categories:
Expand All @@ -28,5 +28,5 @@ policy_templates:
title: Collect logs from MySQL Enterprise instances
description: Collecting MySQL Enterprise audit logs
owner:
github: elastic/sec-windows-platform
github: elastic/security-service-integrations
type: elastic
Loading