-
This issue keeps track of all deprecated Falco features that will be removed in Falco 1.0.0:
* `append` in Falco rule is deprecated in favor of `override` (see https://github.com/falcosecurity/falc…
-
### Question Validation
- [X] I have searched both the documentation and discord for an answer.
### Question
I have searched the documentation but I can't find any conclusive information on this to…
-
"raw_tracepoint/sys_exit"
"raw_tracepoint/sys_enter"
"raw_tracepoint/sched_switch"
"raw_tracepoint/signal_deliver"
"raw_tracepoint/page_fault_user"
"raw_tracepoint/filler/sys_bpf_x"
"raw_trace…
-
-
I am trying to understand the differences between Falco and tetragon. Let’s say, falco is meant for this and it cannot do this like tetragon. Can I get some help? Kindly try to provide elaborate answe…
-
This issue aims to investigate the sustainability-related metrics that could be implemented as part of our reference architecture.
The WG has so far identified the following use cases that each req…
-
Add public `is_cri_async` and a `get_cri_socket_paths` methods to CRI container engine.
See https://github.com/falcosecurity/falco/pull/3266/files#r1659341853
-
**Motivation**
With the introduction of the new Falco plugin system and the new 2.X Helm charts, it's not always really required to run the Falco pod as root. Nevertheless, Falco still does this wh…
-
**Motivation**
If you have Falco deployed to many clusters across different AWS accounts or Google Cloud Projects it can be challenging to understand what Account/Project, Region, and Cluster this sp…
-
**Describe the bug**
In https://github.com/falcosecurity/falco/pull/2728 we've added two flags to `falco-driver-loader` which allow specifying the kernel release and kernel version for whic…