falcosecurity / plugins

Falco plugins registry

Apache License 2.0

80 stars 73 forks source link

feat(cloudtrail): Add generic additionalEventData field #418

Closed uhei closed 6 months ago

uhei commented 6 months ago

What type of PR is this?

/kind feature

Any specific area of the project related to this PR?

/area plugins

What this PR does / why we need it:

Similar to ct.request, all values should also be available for additionalEventData.

github-actions[bot] commented 6 months ago

Rules files suggestions

aws_cloudtrail_rules.yaml

Comparing 360a7250a6a5cffb86ca6bfa9e80413bcc3e7bfc with latest tag cloudtrail-0.11.0

No changes detected

leogr commented 6 months ago

/assign

cc @Issif

github-actions[bot] commented 6 months ago

Rules files suggestions

aws_cloudtrail_rules.yaml

Comparing a0fd01e9cc6c5bccdc53bd3e74758a458c8327d2 with latest tag cloudtrail-0.11.0

No changes detected

poiana commented 6 months ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: leogr, uhei

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/falcosecurity/plugins/blob/master/OWNERS)~~ [leogr] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment

poiana commented 6 months ago

LGTM label has been added.

Git tree hash: 205aa81ee20fc8f23a1706899c71129550338b69