-
**What would you like to be added**:
Context: Falcoctl can retrieve the rules files from OCI when doing `falcoctl artifact install`. However when the artifacts are all installed, I also have so…
-
**What should be investigated.**
The Falco Helm chart uses [falcoctl](https://github.com/falcosecurity/charts/tree/falco-3.3.0/falco#about-falco-artifacts) starting from v3.0.0. `falcoctl` is a tool…
-
**Describe the bug**
The SDK allows code like the following to run:
```go
func init() {
p1 := &SomePlugin{}
p2 := &AnotherPlugin{}
source.Register(p1)
extractor.Register(p2)…
-
**Motivation**
The default go templating language does not come with many data manipulation functions. This limits the 'templating' you can do with the `templatedfields` option. Especially manipula…
-
After upgrading to falco 0.38.0 some k8s specific fields are not pupulated any more. E.g. k8s.ns.name amd k8s.pod.name.
Enviroment ist k8s 1.28.6 with the following runtime components:
* dock…
-
```
21:04:17.936567615: Warning (evt_type=page_fault name= pid=-1 tid=32024 user_loginuid=-1 process= proc_exepath= parent= command= terminal=0 exe_flags=)
21:04:17.936566121: Warning (evt_type=pp…
-
/area documentation
**What would you like to be added**:
@leogr as discussed in the core maintainers meeting 2023-08-03 try to improve docs on website wrt deployment of k8saudit plugins on c…
-
Hiya folks! I am looking forward to using sync-base and the [Nextcloud sync plugin](https://github.com/berlindiamonds/discourse-sync-to-nextcloud).
A line that confused me in the README is:
> In…
maiki updated
7 years ago
-
Hi,
Congrats a lot for this project. Do you think you could transform this stand alone forwarder as an official Falco [plugin](https://github.com/falcosecurity/plugins)? It will help you to promote…
Issif updated
4 months ago
-
Invalid `k8s_audit_rules.yaml` error, during deployment of chart version `4.4.0` (version `4.3.0` works corretly)
```
...
falco │ [falco] Fri May 31 13:42:30 2024: Loading plugin 'k8saudit' f…