{"id":29539671,"url":"https://github.com/reponomadx/ws1-sentinelone-installer","last_synced_at":"2026-05-03T21:34:30.602Z","repository":{"id":304412402,"uuid":"1018719757","full_name":"reponomadx/ws1-sentinelone-installer","owner":"reponomadx","description":"Automated SentinelOne deployment script for macOS using Workspace ONE UEM and Munki.","archived":false,"fork":false,"pushed_at":"2025-07-13T00:13:43.000Z","size":1445,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2025-07-13T00:18:20.378Z","etag":null,"topics":["automation","bash","bash-script","bash-scripting","device-management","endpoint-protection","macos","macos-scripting","mdm","munki","munkipkg","sentinel-1","sentinelone","shell-script","workspace-one","ws1","ws1-uem"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/reponomadx.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-07-12T22:11:30.000Z","updated_at":"2025-07-13T00:11:48.000Z","dependencies_parsed_at":"2025-07-13T00:18:31.061Z","dependency_job_id":"9125e8a0-7436-4290-b744-d4c49989dbd9","html_url":"https://github.com/reponomadx/ws1-sentinelone-installer","commit_stats":null,"previous_names":["reponomadx/ws1-sentinelone-installer"],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/reponomadx/ws1-sentinelone-installer","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/reponomadx%2Fws1-sentinelone-installer","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/reponomadx%2Fws1-sentinelone-installer/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/reponomadx%2Fws1-sentinelone-installer/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/reponomadx%2Fws1-sentinelone-installer/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/reponomadx","download_url":"https://codeload.github.com/reponomadx/ws1-sentinelone-installer/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/reponomadx%2Fws1-sentinelone-installer/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32586187,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-03T06:36:36.687Z","status":"ssl_error","status_checked_at":"2026-05-03T06:36:09.306Z","response_time":103,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["automation","bash","bash-script","bash-scripting","device-management","endpoint-protection","macos","macos-scripting","mdm","munki","munkipkg","sentinel-1","sentinelone","shell-script","workspace-one","ws1","ws1-uem"],"created_at":"2025-07-17T07:08:40.563Z","updated_at":"2026-05-03T21:34:30.570Z","avatar_url":"https://github.com/reponomadx.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003cp align=\"center\"\u003e\n  \u003cimg src=\"https://raw.githubusercontent.com/reponomadx/ws1-sentinelone-installer/main/reponomadx-logo.jpg\" alt=\"reponomadx logo\" width=\"350\"/\u003e\n\u003c/p\u003e\n\n\u003ch1 align=\"center\"\u003eWS1 SentinelOne Installer for macOS\u003c/h1\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"https://img.shields.io/badge/Platform-macOS-black?logo=apple\u0026logoColor=white\" /\u003e\n  \u003cimg src=\"https://img.shields.io/badge/MDM-WorkspaceONE-blue?logo=vmware\" /\u003e\n  \u003cimg src=\"https://img.shields.io/badge/Deployment-SentinelOne-purple\" /\u003e\n  \u003cimg src=\"https://img.shields.io/badge/License-MIT-brightgreen\" /\u003e\n\u003c/p\u003e\n\n---\n\nAutomated macOS installation and upgrade of SentinelOne using Workspace ONE UEM and Munki.  \nThis toolset was developed to address cases where standard app deployment methods fail to install or update the SentinelOne agent reliably.\n\n---\n\n## 📦 What It Does\n\n### `s1_install.sh`\n- ✅ Checks if SentinelOne is already installed  \n- 📁 Verifies the PKG exists in the Munki cache  \n- 🔐 Writes a registration token to disk  \n- 📥 Copies payloads to a local managed user's Downloads folder  \n- 🚀 Installs the SentinelOne agent using `installer`  \n- 🧹 Cleans up all temporary files  \n\n### `s1_upgrade.sh`\n- 🔍 Checks current installed SentinelOne version  \n- 🔁 Compares against expected version  \n- 📦 Copies upgrade PKG if out of date  \n- ⬆️ Performs in-place upgrade using `sentinelctl upgrade-pkg`  \n- 🧹 Cleans up staging files  \n\n---\n\n## 🧰 Requirements\n\nTo use these scripts successfully in a Workspace ONE environment:\n\n- SentinelOne `.pkg` must be present in Munki’s local cache  \n- A base64-encoded **registration token** must be provided by your SentinelOne console  \n- Workspace ONE UEM must inject a secure `password` variable into the script  \n- A managed local macOS account must exist with a writable `/Users/username/Downloads` directory  \n  → Need to elevate that account temporarily? Check out [macOS Elevated Admin Rights with Workspace ONE](https://github.com/reponomadx/macos-elevated-admin-ws1)\n\n---\n\n## 🚀 Deployment Method\n\n1. Add the script(s) to Workspace ONE UEM under **Resources \u003e Scripts**  \n2. Use **System context**  \n3. Run `s1_install.sh` on devices that need initial deployment  \n4. Schedule `s1_upgrade.sh` to run periodically (e.g., every 4 hours)  \n5. Add a **Secure String** variable named `password`  \n6. Assign the script to your desired Smart Group (e.g., all macOS Workstations)\n\n---\n\n## ✍️ Customization\n\nBefore deployment, update the following values in the scripts:\n\n```bash\nTARGET_USER=\"Your_macOS_Service_Account\"\necho \"\u003cBase64_SentinelOne_Token\u003e\" \u003e \"$TOKEN_FILE\"\n```\n\nReplace:\n- `Your_macOS_Service_Account` with the correct local user account  \n- `\u003cBase64_SentinelOne_Token\u003e` with your actual SentinelOne token (in base64 format)\n\n---\n\n## 🛑 Security Notice\n\nThese scripts rely on Workspace ONE’s secure variable injection for authentication.  \n**Do not hardcode credentials or tokens.** Always use UEM variables for secrets.\n\n---\n\n## 💬 Discussions\n\nHave questions or feedback?  \nVisit the [Discussions](../../discussions) tab to share tips, suggest features, or ask for help.\n\n---\n\n## 📄 License\n\nThis project is licensed under the terms of the [MIT License](LICENSE).\n\n```\nMIT License\n\nCopyright (c) 2025 Brian Irish\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights  \nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell  \ncopies of the Software, and to permit persons to whom the Software is  \nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in  \nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR  \nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,  \nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE  \nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER  \nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING  \nFROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS  \nIN THE SOFTWARE.\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Freponomadx%2Fws1-sentinelone-installer","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Freponomadx%2Fws1-sentinelone-installer","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Freponomadx%2Fws1-sentinelone-installer/lists"}