thought-machine / falco-probes

Automated build and mirror of eBPF kernel probes for use as a driver with the Falco runtime security agent (https://falco.org/)
Apache License 2.0
16 stars 4 forks source link

Add publishing of built Falco eBPF probes to GitHub releases #12

Closed VJftw closed 3 years ago

VJftw commented 3 years ago

This PR adds the uploading of built Falco eBPF probes to GitHub Releases.

We've used Go to do this as we needed the driverVersion information and it fits quite well into our parallel building in Go too in build/build-and-publish-probes-for-operating-system and the GitHub API was made easy via the https://pkg.go.dev/github.com/google/go-github/v37/github library.

We've had to modify the repository design slightly as GitHub doesn't support tags that are 40 characters long. To work around this limitation, I've truncated the driver version to 8 characters, which still meets our design goals (🤞 for no collisions).

We're also only logging out any upload errors for the time being as we have not yet implemented the IsAlreadyMirrored function because we are seeing "already exists" errors.