-
**Describe the bug**
the eks audit plugin is emitting events for "disallowed k8s user" for system users. There are rules to exclude system users but they are apparently not being honored.
U…
-
Dear Falco community,
@mikegcoleman, @n1g3ld0ugla5, and I would like to propose improvements to the "Falco Plugins" and "Event Sources" documentation.
The current structure is the following:
```
…
pmusa updated
4 months ago
-
**Motivation**
The idea is inspired by [terraform-provider-scaffolding](https://github.com/hashicorp/terraform-provider-scaffolding) project, which makes life easier to create custom providers from…
-
### Describe the bug
I'm trying to cross-compile 5.0 branch for an aarch64 system on a x86_64 host. The building of packages for x86_64 succeeds but the step that compiles packages for aarch64 fails.…
-
**Describe the bug**
After upgrading Falco from `0.36.2` to `0.37.1` and switching driver from `ebpf` to `modern_ebpf`, it causes physical server with higher load to crash.
**How to reproduce it…
-
**Describe the bug / how to reproduce**
1. go to https://falcosecurity.github.io/falco-playground/
2. select "run with scap" from the dropdown and click on a scap file
3. the terminal reports "…
-
### What happened?
After joining worker node(**Rocky Linux 9.0)** the pods keep getting deleted and recreated with `Pod sandbox changed, it will be killed and re-created.` message
```bash
Norma…
-
With the [change to defaulting](https://kubernetes.io/blog/2022/11/28/registry-k8s-io-faster-cheaper-ga/) to registry.k8s.io as our image registry and the [planned freeze in April](https://kubernetes.…
-
Hi there,
First of all, let me say a big thank you for this awesome program! It seems to be working well and I love it!
I think that it would be greatly improved if it calculates a checksum for …
-
**Describe the bug**
The k8s_audit_rules.yaml missing macro about **rolebinding** in default
**How to reproduce it**
You can find **code line 579 & 587** in https://github.com/falcosecu…