search

falcosecurity / event-generator

Generate a variety of suspect actions that are detected by Falco rulesets
Apache License 2.0
94 stars 40 forks source link

[hold] Update K8saudit actions #210

Open leogr opened 6 months ago

leogr commented 6 months ago

Motivation

They have changed may times. Some were not working even before the change.

The last relevant change to the k8saudit ruleset was https://github.com/falcosecurity/plugins/pull/484

Feature

Just update relevant actions to trigger k8saudit rules.

Alternatives

Additional context

poiana commented 3 months ago

Issues go stale after 90d of inactivity.

Mark the issue as fresh with /remove-lifecycle stale.

Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Provide feedback via https://github.com/falcosecurity/community.

/lifecycle stale

leogr commented 3 months ago

/remove-lifecycle stale

poiana commented 3 weeks ago

Issues go stale after 90d of inactivity.

Mark the issue as fresh with /remove-lifecycle stale.

Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Provide feedback via https://github.com/falcosecurity/community.

/lifecycle stale

leogr commented 3 weeks ago

Update: Since the introduction of the declarative mechanism to define actions and tests, we are redesigning this tool; it is worth waiting before updating it and considering a new mechanism to work with plugin data sources (instead of just updating the actions implemented in the old way).

For this reason, I put this on hold but leave it open to no forget.

/remove-lifecycle stale