Fix/ci update pack release

.github/workflows/soc-packs-release.yml

@@ -216,43 +216,3 @@ jobs:
         run: |
           echo "Deploying: $CONTENT_REPO_RAW_LINK"
           printf 'yes\n' | python setup.py
-
-  # ── JOB 3: UPDATE PACK CATALOG [MANUAL GATE] ────────────────────
-  catalog:
-    name: Update pack_catalog.json
-    needs: [release, deploy]
-    if: needs.release.outputs.has_changes == 'true'
-    runs-on: ubuntu-latest
-    environment:
-      name: pack-catalog-gate   # ← requires your approval before running
-
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
-          fetch-depth: 0
-
-      - uses: actions/setup-python@v5
-        with:
-          python-version: "3.10"
-
-      - name: Update pack_catalog.json from pack_metadata.json
-        run: |
-          python tools/update_pack_catalog.py \
-            --packs-dir Packs \
-            --catalog pack_catalog.json \
-            --org Palo-Cortex \
-            --repo secops-framework \
-            --ref refs/heads/main
-
-      - name: Commit updated catalog
-        run: |
-          git config user.name  "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-          git add pack_catalog.json
-          if git diff --cached --quiet; then
-            echo "pack_catalog.json unchanged — nothing to commit."
-          else
-            git commit -m "- Update pack_catalog.json [skip ci]"
-            git push origin main
-          fi

Packs/SocFrameworkCrowdstrikeFalcon/pack_metadata.json

@@ -3,7 +3,7 @@
   "id": "soc-crowdstrike-falcon",
   "description": "Enhancements for CrowdStrike Falcon telemetry used by the SOC Framework to improve detection, investigation, and response workflows.",
   "support": "community",
-  "currentVersion": "1.0.44",
+  "currentVersion": "1.0.45",
   "author": "Palo Alto Networks",
   "url": "https://github.com/Palo-Cortex/soc-optimization-unified",
   "email": "",

Packs/SocFrameworkCrowdstrikeFalcon/xsoar_config.json

@@ -1,8 +1,8 @@
 {
   "custom_packs": [
     {
-      "id": "SocFrameworkCrowdstrikeFalcon-v1.0.44.zip",
-      "url": "https://github.com/Palo-Cortex/secops-framework/releases/download/SocFrameworkCrowdstrikeFalcon-v1.0.44/SocFrameworkCrowdstrikeFalcon-v1.0.44.zip",
+      "id": "SocFrameworkCrowdstrikeFalcon-v1.0.45.zip",
+      "url": "https://github.com/Palo-Cortex/secops-framework/releases/download/SocFrameworkCrowdstrikeFalcon-v1.0.45/SocFrameworkCrowdstrikeFalcon-v1.0.45.zip",
       "system": "yes"
     }
   ],
@@ -32,9 +32,9 @@
         "all"
       ],
       "isOverridable": false,
-      "enabled": "false",
+      "enabled": "true",
       "name": "CrowdstrikeFalcon_Detections_Incidents",
-      "brand": "CrowdstrikeFalcon",
+      "brand": "CrowdStrikeFalcon",
       "category": "Endpoint",
       "engine": "",
       "engineGroup": "",

Packs/SocFrameworkOptimization/Lists/JobUtilityBulkAlertCloserIDList/JobUtilityBulkAlertCloserIDList.json

@@ -19,5 +19,6 @@
   "toServerVersion": "",
   "truncated": false,
   "type": "plain_text",
-  "version": -1
+  "version": -1,
+  "display_name": "JobUtilityBulkAlertCloserIDList"
 }

Packs/SocFrameworkOptimization/Lists/SOCArtifacts/SOCArtifacts.json

@@ -23,5 +23,6 @@
   "truncated": false,
   "type": "json",
   "version": -1,
-  "fromVersion": "6.5.0"
+  "fromVersion": "6.5.0",
+  "display_name": "SOCArtifacts"
 }

Packs/SocFrameworkOptimization/Lists/SOCExecutionList/SOCExecutionList.json

@@ -23,5 +23,6 @@
   "truncated": false,
   "type": "json",
   "version": -1,
-  "fromVersion": "6.5.0"
+  "fromVersion": "6.5.0",
+  "display_name": "SOCExecutionList"
 }

Packs/SocFrameworkOptimization/Lists/SOCFrameworkActions/SOCFrameworkActions.json

@@ -23,5 +23,6 @@
   "truncated": false,
   "type": "json",
   "version": -1,
-  "fromVersion": "6.5.0"
+  "fromVersion": "6.5.0",
+  "display_name": "SOCFrameworkActions"
 }

Packs/SocFrameworkOptimization/Lists/SOCOptimizationConfig/SOCOptimizationConfig.json

@@ -1,27 +1,28 @@
 {
-    "allRead": true,
-    "allReadWrite": true,
-    "cacheVersn": 0,
-    "data": "-",
-    "definitionId": "",
-    "description": "",
-    "detached": false,
-    "fromServerVersion": "",
-    "id": "SOCOptimizationConfig",
-    "isOverridable": false,
-    "itemVersion": "",
-    "locked": false,
-    "name": "SOCOptimizationConfig",
-    "fromVersion": "6.5.0",
-    "nameLocked": false,
-    "packID": "",
-    "packName": "",
-    "previousAllRead": true,
-    "previousAllReadWrite": true,
-    "system": false,
-    "tags": null,
-    "toServerVersion": "",
-    "truncated": false,
-    "type": "json",
-    "version": -1
-}
+  "allRead": true,
+  "allReadWrite": true,
+  "cacheVersn": 0,
+  "data": "-",
+  "definitionId": "",
+  "description": "",
+  "detached": false,
+  "fromServerVersion": "",
+  "id": "SOCOptimizationConfig",
+  "isOverridable": false,
+  "itemVersion": "",
+  "locked": false,
+  "name": "SOCOptimizationConfig",
+  "fromVersion": "6.5.0",
+  "nameLocked": false,
+  "packID": "",
+  "packName": "",
+  "previousAllRead": true,
+  "previousAllReadWrite": true,
+  "system": false,
+  "tags": null,
+  "toServerVersion": "",
+  "truncated": false,
+  "type": "json",
+  "version": -1,
+  "display_name": "SOCOptimizationConfig"
+}

Packs/SocFrameworkOptimization/Lists/SOCProductCategoryMap/SOCProductCategoryMap.json

@@ -23,5 +23,6 @@
   "truncated": false,
   "type": "json",
   "version": -1,
-  "fromVersion": "6.5.0"
+  "fromVersion": "6.5.0",
+  "display_name": "SOCProductCategoryMap"
 }

Packs/SocFrameworkOptimization/Lists/SOCVendorCapabilities/SOCVendorCapabilities.json

@@ -23,5 +23,6 @@
   "truncated": false,
   "type": "json",
   "version": -1,
-  "fromVersion": "6.5.0"
+  "fromVersion": "6.5.0",
+  "display_name": "SOCVendorCapabilities"
 }