Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
homebrew_packages
The installed homebrew package database.
Column | Type | Description |
---|---|---|
app_name | text | Name of the installed App (for Casks) |
auto_updates | integer | 1 if the cask auto-updates otherwise 0 |
name | text | Package name |
path | text | Package install path |
prefix | text | Homebrew install prefix Not returned in SELECT * FROM homebrew_packages . |
type | text | Package type ('formula' or 'cask') |
version | text | Current 'linked' version |
Check the version of a package installed via homebrew. This example checks the version of ffmeg, which should be replaced by the actual package you want to check for. This is useful for finding problematic or vulnerable installs, though Fleet will detect vulnerable packages automatically.
SELECT version FROM homebrew_packages WHERE name = 'ffmpeg';