Update the event-generator to reflect the recent ruleset split (stable, incubating, sandbox)

falcosecurity / event-generator

Generate a variety of suspect actions that are detected by Falco rulesets

Apache License 2.0

87 stars 37 forks source link

Update the event-generator to reflect the recent ruleset split (stable, incubating, sandbox) #86

Open leogr opened 12 months ago

leogr commented 12 months ago

Motivation

Because of the Rules Maturity Framework proposal.

Feature

Reflect rules' changes
Implement a way to select action groups stable, incubating, sandbox
Only enable stable ones by default

Alternatives

No compelling alternatives.

Additional context

I assume we don't want any more of those rules which are now deprecated.

### Tasks
- [ ] https://github.com/falcosecurity/event-generator/pull/90

poiana commented 9 months ago

Issues go stale after 90d of inactivity.

Mark the issue as fresh with /remove-lifecycle stale.

Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Provide feedback via https://github.com/falcosecurity/community.

/lifecycle stale

leogr commented 9 months ago

/remove-lifecycle stale

leogr commented 9 months ago

/assign

leogr commented 7 months ago

Only enable stable ones by default

This has been addressed by https://github.com/falcosecurity/event-generator/pull/90

leogr commented 5 months ago

Implement a way to select action groups stable, incubating, sandbox

Likely, the best way to implement this is to add tags to the actions (similarly to rules tags) and implement a feature that allows filtering by tags. cc @FedeDP wdyt?

FedeDP commented 5 months ago

I agree, seems like the simplest solution.

poiana commented 2 months ago