Update dosai and osquery (#34)

prabhu · web-flow · commit 8056a895f3e4 · 2025-09-16T22:53:31.000+01:00
Signed-off-by: Prabhu Subramanian &lt;prabhu@appthreat.com&gt;
diff --git a/.github/workflows/native-builds.yml b/.github/workflows/native-builds.yml
@@ -28,17 +28,17 @@ jobs:
     - uses: actions/checkout@v4
     - name: setup upx
       run: |
-        wget https://github.com/upx/upx/releases/download/v5.0.1/upx-5.0.1-amd64_linux.tar.xz
-        tar -xvf upx-5.0.1-amd64_linux.tar.xz
-        chmod +x upx-5.0.1-amd64_linux/upx
-        sudo cp upx-5.0.1-amd64_linux/upx /usr/local/bin/
+        wget https://github.com/upx/upx/releases/download/v5.0.2/upx-5.0.2-amd64_linux.tar.xz
+        tar -xvf upx-5.0.2-amd64_linux.tar.xz
+        chmod +x upx-5.0.2-amd64_linux/upx
+        sudo cp upx-5.0.2-amd64_linux/upx /usr/local/bin/
       if: matrix.os == 'ubuntu-24.04'
     - name: setup upx
       run: |
-        wget https://github.com/upx/upx/releases/download/v5.0.1/upx-5.0.1-arm64_linux.tar.xz
-        tar -xvf upx-5.0.1-arm64_linux.tar.xz
-        chmod +x upx-5.0.1-arm64_linux/upx
-        sudo cp upx-5.0.1-arm64_linux/upx /usr/local/bin/
+        wget https://github.com/upx/upx/releases/download/v5.0.2/upx-5.0.2-arm64_linux.tar.xz
+        tar -xvf upx-5.0.2-arm64_linux.tar.xz
+        chmod +x upx-5.0.2-arm64_linux/upx
+        sudo cp upx-5.0.2-arm64_linux/upx /usr/local/bin/
       if: matrix.os == 'ubuntu-24.04-arm'
     - name: Setup swift
       if: matrix.os == 'ubuntu-24.04' || matrix.os == 'ubuntu-24.04-arm'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -40,10 +40,10 @@ jobs:
         ./contrib/free_disk_space.sh
     - name: Release
       run: |
-        wget https://github.com/upx/upx/releases/download/v5.0.1/upx-5.0.1-amd64_linux.tar.xz
-        tar -xvf upx-5.0.1-amd64_linux.tar.xz
-        chmod +x upx-5.0.1-amd64_linux/upx
-        sudo cp upx-5.0.1-amd64_linux/upx /usr/local/bin/
+        wget https://github.com/upx/upx/releases/download/v5.0.2/upx-5.0.2-amd64_linux.tar.xz
+        tar -xvf upx-5.0.2-amd64_linux.tar.xz
+        chmod +x upx-5.0.2-amd64_linux/upx
+        sudo cp upx-5.0.2-amd64_linux/upx /usr/local/bin/
         npm config set //npm.pkg.github.com/:_authToken=$GITHUB_TOKEN
         npm config set //registry.npmjs.org/:_authToken=$NPMJS_AUTH_TOKEN
         bash build.sh
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -44,10 +44,10 @@ jobs:
         ./contrib/free_disk_space.sh
     - name: Build
       run: |
-        wget https://github.com/upx/upx/releases/download/v5.0.1/upx-5.0.1-amd64_linux.tar.xz
-        tar -xvf upx-5.0.1-amd64_linux.tar.xz
-        chmod +x upx-5.0.1-amd64_linux/upx
-        sudo cp upx-5.0.1-amd64_linux/upx /usr/local/bin/
+        wget https://github.com/upx/upx/releases/download/v5.0.2/upx-5.0.2-amd64_linux.tar.xz
+        tar -xvf upx-5.0.2-amd64_linux.tar.xz
+        chmod +x upx-5.0.2-amd64_linux/upx
+        sudo cp upx-5.0.2-amd64_linux/upx /usr/local/bin/
         bash build.sh
         pip3 install blint
         blint -i plugins -o /tmp/reports --no-error
diff --git a/build.ps1 b/build.ps1
@@ -2,25 +2,25 @@ New-Item -ItemType Directory -Path plugins\osquery -Force
 New-Item -ItemType Directory -Path plugins\dosai -Force
 New-Item -ItemType Directory -Path plugins\trivy -Force
 
-Invoke-WebRequest -Uri https://github.com/upx/upx/releases/download/v5.0.1/upx-5.0.1-win64.zip -UseBasicParsing -OutFile upx-5.0.1-win64.zip
-Expand-Archive -Path upx-5.0.1-win64.zip -DestinationPath . -Force
+Invoke-WebRequest -Uri https://github.com/upx/upx/releases/download/v5.0.2/upx-5.0.2-win64.zip -UseBasicParsing -OutFile upx-5.0.2-win64.zip
+Expand-Archive -Path upx-5.0.2-win64.zip -DestinationPath . -Force
 
-Invoke-WebRequest -Uri https://github.com/osquery/osquery/releases/download/5.17.0/osquery-5.17.0.windows_x86_64.zip -UseBasicParsing -OutFile osquery-5.17.0.windows_x86_64.zip
-Expand-Archive -Path osquery-5.17.0.windows_x86_64.zip -DestinationPath . -Force
-copy "osquery-5.17.0.windows_x86_64\Program Files\osquery\osqueryi.exe" plugins\osquery\osqueryi-windows-amd64.exe
-upx-5.0.1-win64\upx.exe -9 --lzma plugins\osquery\osqueryi-windows-amd64.exe
+Invoke-WebRequest -Uri https://github.com/osquery/osquery/releases/download/5.19.0/osquery-5.19.0.windows_x86_64.zip -UseBasicParsing -OutFile osquery-5.19.0.windows_x86_64.zip
+Expand-Archive -Path osquery-5.19.0.windows_x86_64.zip -DestinationPath . -Force
+copy "osquery-5.19.0.windows_x86_64\Program Files\osquery\osqueryi.exe" plugins\osquery\osqueryi-windows-amd64.exe
+upx-5.0.2-win64\upx.exe -9 --lzma plugins\osquery\osqueryi-windows-amd64.exe
 plugins\osquery\osqueryi-windows-amd64.exe --help
 
 Invoke-WebRequest -Uri https://github.com/owasp-dep-scan/dosai/releases/latest/download/Dosai.exe -UseBasicParsing -OutFile plugins/dosai/dosai-windows-amd64.exe
 
 cd thirdparty\trivy
 go build -ldflags "-H=windowsgui -s -w" -o build\trivy-windows-amd64.exe
-..\..\upx-5.0.1-win64\upx.exe -9 --lzma build\trivy-windows-amd64.exe
+..\..\upx-5.0.2-win64\upx.exe -9 --lzma build\trivy-windows-amd64.exe
 copy build\* ..\..\plugins\trivy\
 Remove-Item build -Recurse -Force
 cd ..\..
 
-Remove-Item osquery-5.17.0.windows_x86_64 -Recurse -Force
-Remove-Item osquery-5.17.0.windows_x86_64.zip -Recurse -Force
-Remove-Item upx-5.0.1-win64 -Recurse -Force
-Remove-Item upx-5.0.1-win64.zip -Recurse -Force
+Remove-Item osquery-5.19.0.windows_x86_64 -Recurse -Force
+Remove-Item osquery-5.19.0.windows_x86_64.zip -Recurse -Force
+Remove-Item upx-5.0.2-win64 -Recurse -Force
+Remove-Item upx-5.0.2-win64.zip -Recurse -Force
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cyclonedx/cdxgen-plugins-bin",
-  "version": "1.6.12",
+  "version": "1.7.0",
   "description": "Binary plugins to supercharge @cyclonedx/cdxgen npm package",
   "main": "index.js",
   "repository": {
diff --git a/packages/darwin-amd64/package.json b/packages/darwin-amd64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cyclonedx/cdxgen-plugins-bin-darwin-amd64",
-  "version": "1.6.12",
+  "version": "1.7.0",
   "description": "Arm64 binary plugins to supercharge @cyclonedx/cdxgen npm package",
   "main": "index.js",
   "repository": {
diff --git a/packages/darwin-arm64/build-darwin-arm64.sh b/packages/darwin-arm64/build-darwin-arm64.sh
@@ -10,11 +10,11 @@ mkdir -p plugins/osquery plugins/dosai plugins/sourcekitten
 
 oras pull ghcr.io/cyclonedx/cdxgen-plugins-bin:darwin-arm64 -o plugins/sourcekitten/
 
-wget https://github.com/osquery/osquery/releases/download/5.17.0/osquery-5.17.0_1.macos_arm64.tar.gz
-tar -xf osquery-5.17.0_1.macos_arm64.tar.gz
+wget https://github.com/osquery/osquery/releases/download/5.19.0/osquery-5.19.0_1.macos_arm64.tar.gz
+tar -xf osquery-5.19.0_1.macos_arm64.tar.gz
 cp -rf opt/osquery/lib/osquery.app plugins/osquery/osqueryi-darwin-arm64.app
 rm -rf etc usr var opt
-rm osquery-5.17.0_1.macos_arm64.tar.gz
+rm osquery-5.19.0_1.macos_arm64.tar.gz
 
 curl -L https://github.com/owasp-dep-scan/dosai/releases/latest/download/Dosai-osx-arm64 -o plugins/dosai/dosai-darwin-arm64
 chmod +x plugins/dosai/dosai-darwin-arm64
diff --git a/packages/darwin-arm64/package.json b/packages/darwin-arm64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cyclonedx/cdxgen-plugins-bin-darwin-arm64",
-  "version": "1.6.12",
+  "version": "1.7.0",
   "description": "Arm64 binary plugins to supercharge @cyclonedx/cdxgen npm package",
   "main": "index.js",
   "repository": {
diff --git a/packages/linux-amd64/build-linux-amd64.sh b/packages/linux-amd64/build-linux-amd64.sh
@@ -10,14 +10,14 @@ sha256sum plugins/sourcekitten/sourcekitten > plugins/sourcekitten/sourcekitten.
 rm -f plugins/sourcekitten/trivy-cdxgen-*
 ls -l plugins/sourcekitten/
 
-wget https://github.com/osquery/osquery/releases/download/5.17.0/osquery-5.17.0_1.linux_x86_64.tar.gz
-tar -xf osquery-5.17.0_1.linux_x86_64.tar.gz
+wget https://github.com/osquery/osquery/releases/download/5.19.0/osquery-5.19.0_1.linux_x86_64.tar.gz
+tar -xf osquery-5.19.0_1.linux_x86_64.tar.gz
 cp opt/osquery/bin/osqueryd plugins/osquery/osqueryi-linux-amd64
 upx -9 --lzma plugins/osquery/osqueryi-linux-amd64
 ./plugins/osquery/osqueryi-linux-amd64 --help
 sha256sum plugins/osquery/osqueryi-linux-amd64 > plugins/osquery/osqueryi-linux-amd64.sha256
 rm -rf etc usr var opt
-rm osquery-5.17.0_1.linux_x86_64.tar.gz
+rm osquery-5.19.0_1.linux_x86_64.tar.gz
 
 # Download the Dosai binary
 curl -L https://github.com/owasp-dep-scan/dosai/releases/latest/download/Dosai-linux-amd64 -o plugins/dosai/dosai-linux-amd64
diff --git a/packages/linux-amd64/package.json b/packages/linux-amd64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cyclonedx/cdxgen-plugins-bin-linux-amd64",
-  "version": "1.6.12",
+  "version": "1.7.0",
   "description": "linux amd64 binary plugins to supercharge @cyclonedx/cdxgen npm package",
   "main": "index.js",
   "repository": {
diff --git a/packages/linux-arm/package.json b/packages/linux-arm/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cyclonedx/cdxgen-plugins-bin-linux-arm",
-  "version": "1.6.12",
+  "version": "1.7.0",
   "description": "Arm binary plugins to supercharge @cyclonedx/cdxgen npm package",
   "main": "index.js",
   "repository": {
diff --git a/packages/linux-arm64/build-linux-arm64.sh b/packages/linux-arm64/build-linux-arm64.sh
@@ -12,13 +12,13 @@ oras pull ghcr.io/cyclonedx/cdxgen-plugins-bin:linux-arm64 -o plugins/sourcekitt
 rm -f plugins/sourcekitten/trivy-cdxgen-*
 ls -l plugins/sourcekitten/
 
-wget https://github.com/osquery/osquery/releases/download/5.17.0/osquery-5.17.0_1.linux_aarch64.tar.gz
-tar -xf osquery-5.17.0_1.linux_aarch64.tar.gz
+wget https://github.com/osquery/osquery/releases/download/5.19.0/osquery-5.19.0_1.linux_aarch64.tar.gz
+tar -xf osquery-5.19.0_1.linux_aarch64.tar.gz
 cp opt/osquery/bin/osqueryd plugins/osquery/osqueryi-linux-arm64
 upx -9 --lzma plugins/osquery/osqueryi-linux-arm64
 sha256sum plugins/osquery/osqueryi-linux-arm64 > plugins/osquery/osqueryi-linux-arm64.sha256
 rm -rf etc usr var opt
-rm osquery-5.17.0_1.linux_aarch64.tar.gz
+rm osquery-5.19.0_1.linux_aarch64.tar.gz
 
 curl -L https://github.com/owasp-dep-scan/dosai/releases/latest/download/Dosai-linux-arm64 -o plugins/dosai/dosai-linux-arm64
 chmod +x plugins/dosai/dosai-linux-arm64
diff --git a/packages/linux-arm64/package.json b/packages/linux-arm64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cyclonedx/cdxgen-plugins-bin-linux-arm64",
-  "version": "1.6.12",
+  "version": "1.7.0",
   "description": "Arm64 binary plugins to supercharge @cyclonedx/cdxgen npm package",
   "main": "index.js",
   "repository": {
diff --git a/packages/linux-riscv64/package.json b/packages/linux-riscv64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cyclonedx/cdxgen-plugins-bin-linux-riscv64",
-  "version": "1.6.12",
+  "version": "1.7.0",
   "description": "RISC-V 64 binary plugins to supercharge @cyclonedx/cdxgen npm package",
   "main": "index.js",
   "repository": {
diff --git a/packages/linuxmusl-amd64/package.json b/packages/linuxmusl-amd64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cyclonedx/cdxgen-plugins-bin-linuxmusl-amd64",
-  "version": "1.6.12",
+  "version": "1.7.0",
   "description": "Linux musl amd64 binary plugins to supercharge @cyclonedx/cdxgen npm package",
   "main": "index.js",
   "repository": {
diff --git a/packages/linuxmusl-arm64/package.json b/packages/linuxmusl-arm64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cyclonedx/cdxgen-plugins-bin-linuxmusl-arm64",
-  "version": "1.6.12",
+  "version": "1.7.0",
   "description": "Linux musl arm64 binary plugins to supercharge @cyclonedx/cdxgen npm package",
   "main": "index.js",
   "repository": {
diff --git a/packages/ppc64/package.json b/packages/ppc64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cyclonedx/cdxgen-plugins-bin-linux-ppc64",
-  "version": "1.6.12",
+  "version": "1.7.0",
   "description": "ppc64 binary plugins to supercharge @cyclonedx/cdxgen npm package",
   "main": "index.js",
   "repository": {
diff --git a/packages/windows-amd64/build-windows-amd64.sh b/packages/windows-amd64/build-windows-amd64.sh
@@ -7,13 +7,13 @@ rm -rf plugins/osquery
 rm -rf plugins/dosai
 mkdir -p plugins/osquery plugins/dosai
 
-wget https://github.com/osquery/osquery/releases/download/5.17.0/osquery-5.17.0.windows_x86_64.zip
-unzip osquery-5.17.0.windows_x86_64.zip
-cp "osquery-5.17.0.windows_x86_64/Program Files/osquery/osqueryi.exe" plugins/osquery/osqueryi-windows-amd64.exe
+wget https://github.com/osquery/osquery/releases/download/5.19.0/osquery-5.19.0.windows_x86_64.zip
+unzip osquery-5.19.0.windows_x86_64.zip
+cp "osquery-5.19.0.windows_x86_64/Program Files/osquery/osqueryi.exe" plugins/osquery/osqueryi-windows-amd64.exe
 upx -9 --lzma plugins/osquery/osqueryi-windows-amd64.exe
 sha256sum plugins/osquery/osqueryi-windows-amd64.exe > plugins/osquery/osqueryi-windows-amd64.exe.sha256
-rm -rf osquery-5.17.0.windows_x86_64
-rm osquery-5.17.0.windows_x86_64.zip
+rm -rf osquery-5.19.0.windows_x86_64
+rm osquery-5.19.0.windows_x86_64.zip
 
 curl -L https://github.com/owasp-dep-scan/dosai/releases/latest/download/Dosai.exe -o plugins/dosai/dosai-windows-amd64.exe
 sha256sum plugins/dosai/dosai-windows-amd64.exe > plugins/dosai/dosai-windows-amd64.exe.sha256
diff --git a/packages/windows-amd64/package.json b/packages/windows-amd64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cyclonedx/cdxgen-plugins-bin-windows-amd64",
-  "version": "1.6.12",
+  "version": "1.7.0",
   "description": "Windows amd64 binary plugins to supercharge @cyclonedx/cdxgen npm package",
   "main": "index.js",
   "repository": {
diff --git a/packages/windows-arm64/build-windows-arm64.sh b/packages/windows-arm64/build-windows-arm64.sh
@@ -7,12 +7,12 @@ rm -rf plugins/osquery
 rm -rf plugins/dosai
 mkdir -p plugins/osquery plugins/dosai
 
-wget https://github.com/osquery/osquery/releases/download/5.17.0/osquery-5.17.0.windows_arm64.zip
-unzip osquery-5.17.0.windows_arm64.zip
-cp "osquery-5.17.0.windows_arm64/Program Files/osquery/osqueryi.exe" plugins/osquery/osqueryi-windows-arm64.exe
+wget https://github.com/osquery/osquery/releases/download/5.19.0/osquery-5.19.0.windows_arm64.zip
+unzip osquery-5.19.0.windows_arm64.zip
+cp "osquery-5.19.0.windows_arm64/Program Files/osquery/osqueryi.exe" plugins/osquery/osqueryi-windows-arm64.exe
 sha256sum plugins/osquery/osqueryi-windows-arm64.exe > plugins/osquery/osqueryi-windows-arm64.exe.sha256
-rm -rf osquery-5.17.0.windows_arm64
-rm osquery-5.17.0.windows_arm64.zip
+rm -rf osquery-5.19.0.windows_arm64
+rm osquery-5.19.0.windows_arm64.zip
 
 curl -L https://github.com/owasp-dep-scan/dosai/releases/latest/download/Dosai-windows-arm64.exe -o plugins/dosai/dosai-windows-arm64.exe
 sha256sum plugins/dosai/dosai-windows-arm64.exe > plugins/dosai/dosai-windows-arm64.exe.sha256
diff --git a/packages/windows-arm64/package.json b/packages/windows-arm64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cyclonedx/cdxgen-plugins-bin-windows-arm64",
-  "version": "1.6.12",
+  "version": "1.7.0",
   "description": "Arm64 binary plugins to supercharge @cyclonedx/cdxgen npm package",
   "main": "index.js",
   "repository": {

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@cyclonedx/cdxgen-plugins-bin",`
`3`		`- "version": "1.6.12",`
	`3`	`+ "version": "1.7.0",`
`4`	`4`	`"description": "Binary plugins to supercharge @cyclonedx/cdxgen npm package",`
`5`	`5`	`"main": "index.js",`
`6`	`6`	`"repository": {`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@cyclonedx/cdxgen-plugins-bin-darwin-amd64",`
`3`		`- "version": "1.6.12",`
	`3`	`+ "version": "1.7.0",`
`4`	`4`	`"description": "Arm64 binary plugins to supercharge @cyclonedx/cdxgen npm package",`
`5`	`5`	`"main": "index.js",`
`6`	`6`	`"repository": {`