Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

RE: <https://github.com/osquery/osquery/pull/8585#issuecomment-2778409974>
Trying to figure out how to replicate the test failure seen on CI.
``` [----------] 1 test from Mdfind
 [ RUN      ] Mdfind.test_sanity
 W20250403 04:26:13.816380 72585088 mdfind.mm:74] Could not execute mdfind query
 /Users/runner/work/osquery/osquery/workspace/src/tests/integration/tables/mdfind.cpp:32: Failure
 Expected equality of these values:
   rows.size()
     Which is: 0
   10
 [  FAILED  ] Mdfind.test_sanity (1002 ms)
 [----------] 1 test from Mdfind (1002 ms total) ```

but naturally it works on my mac.
```$ GTEST_FILTER=Mdfind.* ./tests/integration/tables/tests_integration_tables-test --gtest_catch_exceptions=0
Running main() from /Users/ksykulev/projects/ksykulev-osquery/libraries/cmake/source/googletest/src/googletest/src/gtest_main.cc
Note: Google Test filter = Mdfind.*
[==========] Running 1 test from 1 test suite.
[----------] Global test environment set-up.
[----------] 1 test from Mdfind
[ RUN      ] Mdfind.test_sanity
[       OK ] Mdfind.test_sanity (88 ms)
[----------] 1 test from Mdfind (88 ms total)

[----------] Global test environment tear-down
[==========] 1 test from 1 test suite ran. (88 ms total)
[  PASSED  ] 1 test.```
And I ran the entire test suite,
```80/81 Test #80: tools_tests_testrelease ...............................................   Passed    0.11 sec
      Start 81: tests_integration_tables-test
81/81 Test #81: tests_integration_tables-test .........................................   Passed  899.55 sec

100% tests passed, 0 tests failed out of 81```
and it all passed