GitHub
11/10/2026, 10:51 AMpkg/santa, osctrl-tls sync endpoint, Santa page in the UI).
Problem
Deciding on a rule needs context: who signed this binary, how many machines ran it, when it first appeared.
Scope
• Binary page keyed by SHA-256: signing chain, team ID, signing ID, CDHash, bundle info from events, first/last seen, machine count, matching rules.
• Link from Events and from the approval queue.
• Store the signing chain and bundle fields from eventupload if not already kept.
Acceptance
• Detail view loads from existing event data without new client changes.
jmpsec/osctrl