Feature request
What new feature do you want?
osqueryd works well on nixos for general linux parts but it'd be nice to have more integration for the nixos specific parts.
There are many parts of NixOS that would be cool to query but to start with some kind of list of packages on the machine would be good.
The easiest option first might be to provide every package within the /nix/store
Future work could be query nixos generations separately, query just environment.systemPackages or users.users.<name>.packages for that generation, etc
How is this new feature useful?
I could query the packages on my nixos machine and work towards being able to review the packages for vulnerabilities
How can this be implemented?
A similar approach to syft that processes entries to the /nix/store might be good
https://github.com/anchore/syft/pull/1696/files#diff-586ef9e8ef1bb7af74c55ba184b0f77cf7c519bb02a97e93a362ebbc984d7276R1
Or hooking into nix-store directly to get info may be best
Feature request
What new feature do you want?
osqueryd works well on nixos for general linux parts but it'd be nice to have more integration for the nixos specific parts.
There are many parts of NixOS that would be cool to query but to start with some kind of list of packages on the machine would be good.
The easiest option first might be to provide every package within the
/nix/storeFuture work could be query nixos generations separately, query just
environment.systemPackagesorusers.users.<name>.packagesfor that generation, etcHow is this new feature useful?
I could query the packages on my nixos machine and work towards being able to review the packages for vulnerabilities
How can this be implemented?
A similar approach to syft that processes entries to the /nix/store might be good
https://github.com/anchore/syft/pull/1696/files#diff-586ef9e8ef1bb7af74c55ba184b0f77cf7c519bb02a97e93a362ebbc984d7276R1
Or hooking into
nix-storedirectly to get info may be best