falcosecurity / rules

Falco rule repository

https://falcosecurity.github.io/rules/

Apache License 2.0

89 stars 64 forks source link

update(build/registry): make sure new artifacts requirements contain … #185

Closed loresuso closed 7 months ago

loresuso commented 8 months ago

…the new engine_version_semver key.

All the rules are already modified to contain a semver string

What type of PR is this?

Uncomment one (or more) /kind <> lines:

/kind feature

/kind bug

/kind cleanup

/kind design

/kind documentation

/kind failing-test

Any specific area of the project related to this PR?

Uncomment one (or more) /area <> lines:

/area rules

/area registry

/area build

/area documentation

Proposed rule maturity level

Uncomment one (or more) /area <> lines (only for PRs that add or modify rules):

/area maturity-stable

/area maturity-incubating

/area maturity-sandbox

/area maturity-deprecated

What this PR does / why we need it: Find more details in https://github.com/falcosecurity/falco/pull/2899

Which issue(s) this PR fixes:

Fixes #

Special notes for your reviewer:

github-actions[bot] commented 8 months ago

Rules files suggestions

falco_rules.yaml

Comparing 75460a5895d1b2e75c5e7ed19a2099beb16ba4d8 with latest tag falco-rules-2.0.0

Minor changes:

Macro containerd_activities has been added

falco-sandbox_rules.yaml

Comparing 75460a5895d1b2e75c5e7ed19a2099beb16ba4d8 with latest tag falco-sandbox-rules-2.0.0

No changes detected

falco-incubating_rules.yaml

Comparing 75460a5895d1b2e75c5e7ed19a2099beb16ba4d8 with latest tag falco-incubating-rules-2.0.0

Minor changes:

Rule Adding ssh keys to authorized_keys has been added
Rule Potential Local Privilege Escalation via Environment Variables Misuse has been added
Macro glibc_tunables_env has been added

github-actions[bot] commented 8 months ago

Rules files suggestions

falco_rules.yaml

Comparing 688bcb20c06b920ee390264d47e9fc373209a84b with latest tag falco-rules-2.0.0

Minor changes:

Macro containerd_activities has been added

falco-sandbox_rules.yaml

Comparing 688bcb20c06b920ee390264d47e9fc373209a84b with latest tag falco-sandbox-rules-2.0.0

No changes detected

falco-incubating_rules.yaml

Comparing 688bcb20c06b920ee390264d47e9fc373209a84b with latest tag falco-incubating-rules-2.0.0

Minor changes:

Rule Adding ssh keys to authorized_keys has been added
Rule Potential Local Privilege Escalation via Environment Variables Misuse has been added
Macro glibc_tunables_env has been added

github-actions[bot] commented 8 months ago

Rules files suggestions

falco_rules.yaml

Comparing aef3930c7839d50ac9e053286d63985a0ce7a368 with latest tag falco-rules-2.0.0

Minor changes:

Macro containerd_activities has been added

falco-sandbox_rules.yaml

Comparing aef3930c7839d50ac9e053286d63985a0ce7a368 with latest tag falco-sandbox-rules-2.0.0

No changes detected

falco-incubating_rules.yaml

Comparing aef3930c7839d50ac9e053286d63985a0ce7a368 with latest tag falco-incubating-rules-2.0.0

Minor changes:

Rule Adding ssh keys to authorized_keys has been added
Rule Potential Local Privilege Escalation via Environment Variables Misuse has been added
Macro glibc_tunables_env has been added

github-actions[bot] commented 8 months ago

Rules files suggestions

falco_rules.yaml

Comparing 8659da816e909df0eafec69967ff60f7d508d0f7 with latest tag falco-rules-2.0.0

Minor changes:

Macro containerd_activities has been added

falco-sandbox_rules.yaml

Comparing 8659da816e909df0eafec69967ff60f7d508d0f7 with latest tag falco-sandbox-rules-2.0.0

No changes detected

falco-incubating_rules.yaml

Comparing 8659da816e909df0eafec69967ff60f7d508d0f7 with latest tag falco-incubating-rules-2.0.0

Minor changes:

Rule Potential Local Privilege Escalation via Environment Variables Misuse has been added
Rule Adding ssh keys to authorized_keys has been added
Macro glibc_tunables_env has been added

poiana commented 7 months ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: FedeDP, loresuso

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/falcosecurity/rules/blob/main/OWNERS)~~ [FedeDP] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment

poiana commented 7 months ago

LGTM label has been added.

Git tree hash: c2ce80e8858cb99acd035d90382c265b60cf8d01