Loading
Web App
4/6 checks passed
Updated Sep 2026IntuneGet
A web-based tool that automates deploying Windows applications from the Winget package repository directly into Microsoft Intune. Handles the entire deployment pipeline - searching, packaging apps into .intunewin format, and uploading to your Intune tenant. Features AI-powered app discovery, auto-generated detection rules, PSADT v4 support, configurable update policies, pre-upload permission checks, and multi-channel notifications via Slack, Teams, Discord, email, and webhooks. Self-hostable via Docker with embedded SQLite.
Works with
WindowsWin32 AppsGraph APIWinget
Screenshots
1 / 2Swipe to see more
Security Analysis
4of 6
2 Issues Found
50 files scanned on Sep 20, 2026
Issues Detected
No Data Exfiltration
No suspicious outbound data transfers
The script transmits curated app data (winget_id, name, publisher, description, tags, category) to the OpenAI API for classification. This constitutes data exfiltration of potentially sensitive internal catalog data to an external service. Consider data minimization, on-prem or controlled classification tooling, and verify that data handling complies with organizational policies and OpenAI data usage terms.
No Hardcoded Secrets
No API keys or credentials in code
The script relies on credentials supplied via environment variables: NEXT_PUBLIC_SUPABASE_URL and SUPABASE_SERVICE_ROLE_KEY, as well as OPENAI_API_KEY. The presence of a service role key (highly privileged) in code paths or logs, especially if the NEXT_PUBLIC_ prefix suggests potential frontend exposure, creates a risk of secret leakage. Ensure secrets are kept in secure vaults, never exposed to client-side contexts, rotate keys, and restrict service role permissions.
Passed Checks
No Obfuscated Code
No Remote Execution
No Credential Theft
No Malicious Patterns
AI Analysis
Two security concerns detected: (1) data exfiltration risk from categorize-apps.js due to sending internal app metadata to OpenAI; (2) secret management risk due to usage of a highly privileged Supabase service role key and OpenAI key in environment/config. audit-duplicate-icons.mjs shows no security issues (read-only auditing script with no external data transfers). Recommend data minimization, on-prem classification where possible, and strict secret management practices to mitigate exposure.
You might also like
PowerShell Module
Stephan van Rooij
Wintuner
WinTuner is a tool that lets you take any WinGet app and upload it to Intune in minutes. It automates downloading the installer and logo, generates the intunewin package, creates the required deployment script details, and publishes the app to Intune. It also ships a PowerShell module for automation and includes documentation to guide you through the process.
Stephan van RooijCLI Tool
Ayoub Sekoum
AutomaTuner
A Python tool that automates packaging and deploying applications from the Winget repository into Microsoft Intune using WinTuner. Features automated packaging, direct publishing, dependency handling, duplicate detection, and report generation with Azure AD authentication.
Ayoub SekoumDesktop App
Rink Turksma
IntunePrepTool
A PowerShell GUI tool for streamlining application packaging for Microsoft Intune. Supports MSI, MSIX, EXE, PowerShell scripts, Winget, Chocolatey, and scheduled tasks. Features automatic script generation, direct Intune upload, registry modifications, shortcuts, and AI-assisted configuration via Azure OpenAI GPT-4.
Rink TurksmaPowerShell Module
Nickolaj Andersen
IntuneWin32App
A PowerShell module for managing the complete lifecycle of Win32 applications in Microsoft Intune. Features 40+ functions for packaging, publishing, detection rules, requirement rules, assignments, dependencies, and supersedence with support for x64, x86, and ARM64 architectures.
Nickolaj Andersen