add check to test if macOS is up to date

core/mondoo-macos-security.mql.yaml

@@ -79,6 +79,7 @@ policies:
           - uid: mondoo-macos-security-software-updates-automatic-check-enabled
           - uid: mondoo-macos-security-software-updates-automatic-download
           - uid: mondoo-macos-security-software-updates-install-critical-updates
+          - uid: mondoo-macos-security-ensure-macos-is-up-to-date
       - title: Account Security
         filters: |
           asset.platform == "macos"
@@ -1252,3 +1253,27 @@ queries:
         ```bash
         sudo /usr/bin/defaults write /Library/Preferences/com.apple.SoftwareUpdate CriticalUpdateInstall -bool true
         ```
+  - uid: mondoo-macos-security-ensure-macos-is-up-to-date
+    title: Ensure macOS is up to date
+    impact: 100
+    mql: |
+      command("softwareupdate -l").stderr.contains("No new software available.")
+    docs:
+      desc: |
+        By staying up to date on macOS patches, vulnerabilities in the macOS can be mitigated. An educated attacker can exploit known vulnerabilities when attempting to attain access or elevate privileges on a macOS.
+      remediation: |-
+        Perform the following to update the macOS to the latest version:
+
+        _Graphical Method:_
+
+        1.  Open **General**.
+        2.  Select **Software Update**.
+        3.  Select **Update Now**.
+
+        _Terminal Method:_
+
+        Run this command to install all available updates:
+
+        ```bash
+        softwareupdate -i -a
+        ```