Skip to content

[pull] dev from KelvinTegelaar:dev#102

Open
pull[bot] wants to merge 7543 commits intocovenanttechnologysolutions:devfrom
KelvinTegelaar:dev
Open

[pull] dev from KelvinTegelaar:dev#102
pull[bot] wants to merge 7543 commits intocovenanttechnologysolutions:devfrom
KelvinTegelaar:dev

Conversation

@pull
Copy link
Copy Markdown

@pull pull bot commented Dec 2, 2025

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

@pull pull bot locked and limited conversation to collaborators Dec 2, 2025
@pull pull bot added the ⤵️ pull label Dec 2, 2025
Brad-M-K and others added 28 commits March 12, 2026 01:51
[pull] dev from KelvinTegelaar:dev
Fix: Update litigation hold standard to use more service plans
…-activity

Bug/scheduled offboarding activity
This function configures the default app management policy to control credential restrictions for applications and service principals, including password and key credential lifetimes.
- Implemented SID conversion in Invoke-ListGroups and Invoke-ListRoles functions using Convert-AzureAdObjectIdToSid.
- Added new Convert-AzureAdObjectIdToSid function to convert Azure AD Object ID to Windows SID representation.
Fixes Cannot convert the "System.Object[]" value of type "System.Object[]" to type "System.Collections.Generic.IEnumerable1[System.String]"
learned more about .js - removed redundant coalescing I copied from other standards as baseline
Convert the "user-select" value to an empty locale string before building the Autopilot deployment profile payload, so Intune displays "User Select" in the profile.
deletes duplicate subs from graph and removes corresponding entities from the table
Zacgoose and others added 30 commits March 27, 2026 18:37
Ignore proxyman.pem in repo and add optional Proxyman CA handling: Dockerfile will, if proxyman.pem is present in the build context, install ca-certificates, copy the PEM to /usr/local/share/ca-certificates/proxyman.crt and run update-ca-certificates. profile.ps1 now checks for proxyman.pem in the script folder and verifies whether the certificate is trusted, emitting informational or warning messages. These changes enable optional local dev HTTPS inspection without affecting builds that don’t include the certificate.
Introduce Microsoft 365 Copilot readiness tests and supporting cache items. Adds six identity tests (CopilotReady001-006) and report.json under Tests/CopilotReadiness, new caching functions for OfficeActivations, EmailActivity, and TeamsUserActivity, and registers these types in CIPPDBCacheTypes.json and Invoke-CIPPDBCacheCollection. Update Add-CIPPDbItem to use userPrincipalName as an ID fallback (and generate a GUID if missing). Make Invoke-CIPPDBTestsRun accept a -Force switch (and clear rerun protection) and rename Push-CIPPTestsRun to Push-CIPPDBTestsRun to call tests with -Force. Also update New-ExoRequest: bump ExO module version, normalize Anchor variable usage, and improve request/response logging. Add additional error logging in CippEntrypoints for activity function failures.
Add Copilot and Purview cache types, collectors, and many Copilot readiness tests.

Changes include:
- Added new cache types to CIPPDBCacheTypes.json: SensitivityLabels, DlpCompliancePolicies, CopilotUsageUserDetail, CopilotUserCountSummary, CopilotUserCountTrend.
- Push-CIPPDBCacheData: add Compliance license check, always enqueue CopilotUsage task, and conditionally enqueue a Compliance grouped task.
- Invoke-CIPPDBCacheCollection: add 'Compliance' and 'CopilotUsage' collection types and map them to new cache types.
- New Set-CIPPDBCache* functions: Set-CIPPDBCacheCopilotUsageUserDetail, Set-CIPPDBCacheCopilotUserCountSummary, Set-CIPPDBCacheCopilotUserCountTrend, Set-CIPPDBCacheDlpCompliancePolicies, Set-CIPPDBCacheSensitivityLabels to perform Graph/EXO requests and cache results.
- Add a large set of Copilot readiness tests and Markdown docs (multiple Invoke-CippTestCopilotReady00X.ps1 and corresponding .md files). Tests 001 and 002 updated to evaluate licenses using service plan fields and unified license fields/counts.
Signed-off-by: Zacgoose <107489668+Zacgoose@users.noreply.github.com>
Add support for scheduling and executing custom PowerShell scripts as
individual CIPP tests. Push-CIPPTestsList now excludes the aggregate
'CustomScripts' entry and enumerates latest enabled versions of
CustomPowershellScripts, adding tasks named CustomScript-<ScriptGuid>
for each enabled latest version. Push-CIPPTest handles TestId matching
CustomScript-* by invoking Invoke-CippTestCustomScripts and returning a
testRun result. Invoke-CippTestCustomScripts gained a ScriptGuid
parameter and now filters table lookups by ScriptGuid, ensures only the
latest enabled version runs, and logs when no matching latest script is
found. Also update Invoke-ExecCustomScript role from
CIPP.CustomScript.Execute to CIPP.CustomScript.ReadWrite.

enable/disable actions
Divide tests into groups per test suite collection
Custom tests executed separately as it's own collection
Add support for updating custom reports. Improve test summary counts in Invoke-ListTests by adding NeedsAttention (counts Investigate and Active) and Informational buckets across Identity/Devices/Custom. Normalize several ORCA IDs in report.json (add underscores) and change TestType to 'Identity' for multiple ZTNA test scripts (previously 'ZeroTrustNetworkAccess' or 'Devices').
Add support for updating custom reports. Improve test summary counts in
Invoke-ListTests by adding NeedsAttention (counts Investigate and
Active) and Informational buckets across Identity/Devices/Custom.
Normalize several ORCA IDs in report.json (add underscores) and change
TestType to 'Identity' for multiple ZTNA test scripts (previously
'ZeroTrustNetworkAccess' or 'Devices').
…der (#1972)

- Add missing `Content-Type: application/json` header to Graph Batch API
sub-requests in
`Remove-CIPPUserTeamsPhoneDIDs`, fixing "Write request does not contain
a Content-Type header" error
- Accept HTTP 202 as success status
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.