Patch Management - Where to get packages?

You need to make the packages, or download packages (.pkg, NOT DMG).

Uploading a downloaded DMG will produce unexpected results.

Note that many downloads (like Google) will be a DMG with a PKG inside of it. Upload the PKG, NOT the DMG.

1) You need to find the relevant packages. Jamf doesn't provide them for you. However, the Third-Party Products section here at JamfNation is a pretty good resource for these titles and getting straight to their download pages, so, while Jamf doesn't provide the packages to you directly from a source, they do help by having those pages there.

Keep in mind though, that anyone in the Jamf community can edit those pages, so just be sure to verify the links to be sure they are getting you what you expect.

2) Most vendor supplied DMGs will not work in Jamf Pro as is. In fact, I'd say none of them do since typically they have an app at the root level of the mounted volume, and "Jamf" type DMGs need a folder structure telling it where files should go. So, no, you can't use them as is. You'd need to build a proper package in a program like Composer or Packages.app, etc before you can use them in a Jamf Pro policy.

AutoPkg is an excellent tool for getting those packages! Check out the ".jss" recipes for packages that are automatically prepared for (and even loaded to) your JSS.

Thanks for the responses.
It was as expected generally, but thought I should check it out before moving on (the documentation wasn't really clear on that).