falcosecurity/falco issues and pull requests

#3396 - Falco Training links broken

Issue - State: closed - Opened by killerzwelch 3 months ago - 1 comment
Labels: kind/bug

#3395 - Use string operators with lists

Issue - State: open - Opened by wangwillian0 3 months ago - 1 comment
Labels: kind/feature, lifecycle/stale

#3395 - Use string operators with lists

Issue - State: open - Opened by wangwillian0 3 months ago - 1 comment
Labels: kind/feature, lifecycle/stale

#3394 - update(cmake): bump yaml-cpp to latest master.

Pull Request - State: closed - Opened by FedeDP 3 months ago - 2 comments
Labels: release-note, dco-signoff: yes, lgtm, approved, size/XS, area/build, kind/release

#3393 - Falco Driver for ECS Fargate in Oct. 2024?

Issue - State: open - Opened by gjyoung1974 3 months ago - 2 comments
Labels: kind/documentation, lifecycle/stale

#3392 - update(cmake): update libs and driver to latest master

Pull Request - State: closed - Opened by github-actions[bot] 3 months ago - 19 comments
Labels: dco-signoff: yes, lgtm, release-note-none, approved, size/XS, area/build, kind/release

#3391 - chore(deps): Bump submodules/falcosecurity-rules from `407e997` to `283a62f`

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 3 comments
Labels: dco-signoff: yes, lgtm, release-note-none, approved, size/XS, dependencies, submodules

#3390 - Falco doesn’t work in any driver mode on Oracle Linux

Issue - State: closed - Opened by kirylbelavus 4 months ago - 5 comments
Labels: kind/bug

#3389 - update(cmake): bump libs to latest master.

Pull Request - State: closed - Opened by FedeDP 4 months ago - 2 comments
Labels: dco-signoff: yes, lgtm, release-note-none, approved, size/XS, area/build, kind/release

#3388 - new(userspace): honor new plugins exposed suggested output formats

Pull Request - State: closed - Opened by FedeDP 4 months ago - 7 comments
Labels: kind/feature, area/engine, release-note, dco-signoff: yes, lgtm, size/M, approved

#3387 - Why use bpf_printk printed message in the/sys/kernel/debug/tracing/trace_pipe can't see

Issue - State: open - Opened by aliinchina 4 months ago - 2 comments
Labels: needs-kind, lifecycle/stale

#3386 - update(ci): use arm64 CNCF runners for GH actions

Pull Request - State: closed - Opened by LucaGuerra 4 months ago - 6 comments
Labels: dco-signoff: yes, lgtm, release-note-none, size/S, approved

#3385 - update(cmake): update libs and driver to latest master

Pull Request - State: closed - Opened by github-actions[bot] 4 months ago - 8 comments
Labels: dco-signoff: yes, lgtm, release-note-none, size/S, approved, area/build, kind/release

#3385 - update(cmake): update libs and driver to latest master

Pull Request - State: closed - Opened by github-actions[bot] 4 months ago - 8 comments
Labels: dco-signoff: yes, lgtm, release-note-none, size/S, approved, area/build, kind/release

#3384 - How to eanble and use Incubating Falco Rules or Sandbox Falco Rules?

Issue - State: open - Opened by yf-0dyssey 4 months ago - 3 comments
Labels: kind/documentation, lifecycle/stale

#3383 - Reject mismatched sources rules changes

Pull Request - State: closed - Opened by mstemm 4 months ago - 6 comments
Labels: kind/bug, area/engine, release-note, dco-signoff: yes, lgtm, approved, size/L

#3382 - Can mistakenly append to a base rule from a rule with a different source.

Issue - State: closed - Opened by mstemm 4 months ago
Labels: kind/bug

#3381 - ubuntu 18.04 hwo to install falco

Issue - State: open - Opened by zer0-1s 4 months ago - 1 comment
Labels: kind/bug

#3381 - ubuntu 18.04 hwo to install falco

Issue - State: open - Opened by zer0-1s 4 months ago - 2 comments
Labels: kind/bug

#3380 - update(cmake): update libs and driver to latest master

Pull Request - State: closed - Opened by github-actions[bot] 4 months ago - 8 comments
Labels: dco-signoff: yes, release-note-none, size/XS, area/build, kind/release

#3380 - update(cmake): update libs and driver to latest master

Pull Request - State: closed - Opened by github-actions[bot] 4 months ago - 8 comments
Labels: dco-signoff: yes, release-note-none, size/XS, area/build, kind/release

#3379 - fix(ci): fixed shasum computation for bump-libs CI.

Pull Request - State: closed - Opened by FedeDP 4 months ago - 3 comments
Labels: kind/bug, dco-signoff: yes, lgtm, release-note-none, approved, size/XS, area/ci

#3378 - update(cmake): update libs and driver to latest master

Pull Request - State: closed - Opened by github-actions[bot] 4 months ago - 7 comments
Labels: dco-signoff: yes, release-note-none, size/XS, area/build, kind/release

#3377 - Falco Stopped Sending Granular Insights for Dropped Categories After Update to 0.39.1

Issue - State: closed - Opened by kirylbelavus 4 months ago - 2 comments
Labels: kind/bug

#3376 - chore(ci): use redhat advised method to check rpmsign success.

Pull Request - State: closed - Opened by FedeDP 4 months ago - 3 comments
Labels: kind/bug, dco-signoff: yes, lgtm, release-note-none, approved, size/XS, area/ci

#3375 - Make enable()/disable() virtual so they can be overridden

Pull Request - State: closed - Opened by mstemm 4 months ago - 5 comments
Labels: kind/cleanup, area/engine, dco-signoff: yes, lgtm, release-note-none, approved, size/XS

#3374 - chore(deps): Bump submodules/falcosecurity-rules from `e38fb3f` to `407e997`

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 5 comments
Labels: dco-signoff: yes, lgtm, release-note-none, approved, size/XS, dependencies, submodules

#3373 - update(changelog): updated changelog for 0.39.1.

Pull Request - State: closed - Opened by FedeDP 4 months ago - 2 comments
Labels: dco-signoff: yes, lgtm, release-note-none, size/S, approved, kind/release

#3372 - fix(engine): allow null init_config for plugin info

Pull Request - State: closed - Opened by LucaGuerra 4 months ago - 6 comments
Labels: kind/bug, area/engine, release-note, dco-signoff: yes, lgtm, size/M, approved

#3371 - sync: release 0.39.1

Pull Request - State: closed - Opened by FedeDP 4 months ago - 6 comments
Labels: area/engine, dco-signoff: yes, lgtm, release-note-none, size/M, approved, kind/release

#3370 - update(cmake): update libs and driver to latest master

Pull Request - State: closed - Opened by github-actions[bot] 4 months ago - 5 comments
Labels: dco-signoff: yes, release-note-none, size/XS, do-not-merge/hold, area/build, kind/release

#3369 - fix(ci): fixed bump-libs workflow syntax.

Pull Request - State: closed - Opened by FedeDP 4 months ago - 5 comments
Labels: kind/bug, dco-signoff: yes, lgtm, release-note-none, size/S, approved, area/ci

#3368 - fix(userspace/falco): fix event set selection for plugin with parsing capability

Pull Request - State: closed - Opened by FedeDP 4 months ago - 2 comments
Labels: kind/bug, area/engine, release-note, dco-signoff: yes, lgtm, size/S, approved

#3367 - Send informational messages to stdout instead of stderr

Issue - State: open - Opened by pirxthepilot 4 months ago - 2 comments
Labels: kind/feature

#3366 - [Rocky Linux 9.4] can't build eBPF probe

Issue - State: open - Opened by Sartigan 4 months ago - 2 comments
Labels: kind/bug, lifecycle/rotten

#3365 - chore(deps): Bump submodules/falcosecurity-rules from `b6ad373` to `e38fb3f`

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 2 comments
Labels: dco-signoff: yes, lgtm, release-note-none, approved, size/XS, dependencies, submodules

#3364 - Compile output clone

Pull Request - State: closed - Opened by mstemm 4 months ago - 4 comments
Labels: kind/feature, area/engine, dco-signoff: yes, lgtm, release-note-none, size/M, approved

#3363 - fix(engine): disable comma separated vectors in cxxopts

Pull Request - State: closed - Opened by LucaGuerra 4 months ago - 4 comments
Labels: kind/bug, area/engine, release-note, dco-signoff: yes, lgtm, approved, size/XS

#3362 - new(falco): add falco_libs.snaplen option, deprecate -S / --snaplen

Pull Request - State: closed - Opened by LucaGuerra 4 months ago - 4 comments
Labels: kind/feature, kind/cleanup, area/engine, release-note, dco-signoff: yes, lgtm, size/S, approved

#3361 - cleanup(userspac/falco)!: drop deprecated options.

Pull Request - State: closed - Opened by FedeDP 4 months ago - 2 comments
Labels: kind/cleanup, area/engine, release-note, dco-signoff: yes, lgtm, size/M, approved

#3360 - new(ci): add a workflow to automatically bump libs on each monday.

Pull Request - State: closed - Opened by FedeDP 4 months ago - 2 comments
Labels: kind/feature, dco-signoff: yes, lgtm, release-note-none, size/M, approved, area/ci

#3359 - update(changelog): add changelog for falco 0.39.0

Pull Request - State: closed - Opened by alacuku 4 months ago - 3 comments
Labels: dco-signoff: yes, lgtm, release-note-none, approved, size/L

#3358 - new(falco): add buffer_format_base64 option, deprecate -b

Pull Request - State: closed - Opened by LucaGuerra 4 months ago - 7 comments
Labels: kind/feature, area/engine, release-note, dco-signoff: yes, lgtm, size/M, approved

#3357 - update(changelog): add changelog for falco 0.39.0

Pull Request - State: closed - Opened by alacuku 4 months ago - 5 comments
Labels: dco-signoff: yes, lgtm, release-note-none, approved, size/L

#3356 - cleanup(falco): reformat options::define

Pull Request - State: closed - Opened by LucaGuerra 4 months ago - 3 comments
Labels: kind/cleanup, area/engine, size/XL, dco-signoff: yes, lgtm, release-note-none, approved

#3355 - release sync: 0.39.x

Pull Request - State: closed - Opened by LucaGuerra 4 months ago - 3 comments
Labels: kind/cleanup, area/engine, dco-signoff: yes, lgtm, release-note-none, approved, size/XXL, area/build, area/tests

#3354 - cleanup(falco): ignore lint commit

Pull Request - State: closed - Opened by LucaGuerra 4 months ago - 2 comments
Labels: kind/cleanup, area/engine, dco-signoff: yes, lgtm, release-note-none, approved, size/XS

#3353 - fix(falco): allow disable_cri_async from both CLI and config

Pull Request - State: closed - Opened by LucaGuerra 4 months ago - 3 comments
Labels: kind/bug, area/engine, release-note, dco-signoff: yes, lgtm, size/S, approved

#3352 - new(falco): add base_syscalls.all option to replace -A

Pull Request - State: closed - Opened by LucaGuerra 4 months ago - 6 comments
Labels: kind/feature, area/engine, release-note, dco-signoff: yes, lgtm, size/M, approved

#3351 - chore: ignore_some_files for clang format

Pull Request - State: closed - Opened by Andreagit97 4 months ago - 3 comments
Labels: dco-signoff: yes, lgtm, release-note-none, approved, size/XS

#3350 - chore(falco): apply code formatting

Pull Request - State: closed - Opened by poiana 4 months ago - 9 comments
Labels: kind/cleanup, area/engine, dco-signoff: yes, lgtm, release-note-none, approved, size/XXL, area/build, area/tests, area/ci

#3349 - chore(build): update libs to 0.18.1 (master branch)

Pull Request - State: closed - Opened by LucaGuerra 4 months ago - 4 comments
Labels: kind/feature, release-note, dco-signoff: yes, lgtm, approved, size/XS, area/build

#3348 - [Question] Difference about drop metrics

Issue - State: closed - Opened by chenliu1993 4 months ago - 4 comments
Labels: needs-kind

#3347 - sync: 0.39.x

Pull Request - State: closed - Opened by FedeDP 4 months ago - 2 comments
Labels: dco-signoff: yes, lgtm, release-note-none, size/M, approved, kind/release

#3346 - Collecting all the labels from the containers

Issue - State: open - Opened by Issif 4 months ago - 2 comments
Labels: kind/feature, lifecycle/rotten

#3345 - Container information missing in the alerts generated by the "Privileged Shell Spawned in Container" rule.

Issue - State: closed - Opened by dmeetreey 4 months ago - 20 comments
Labels: kind/bug

#3344 - feat(stats): add host_netinfo networking information stats family

Pull Request - State: closed - Opened by ekoops 4 months ago - 8 comments
Labels: kind/feature, area/engine, release-note, dco-signoff: yes, lgtm, size/M, approved

#3343 - chore(build): update libs to 0.18.1

Pull Request - State: closed - Opened by LucaGuerra 4 months ago - 3 comments
Labels: kind/bug, release-note, dco-signoff: yes, lgtm, approved, size/XS, area/build

#3342 - Default rules for contenarized databases

Issue - State: open - Opened by Diegunio 4 months ago - 2 comments
Labels: kind/feature, lifecycle/rotten

#3341 - sync: release 0.39.x

Pull Request - State: closed - Opened by FedeDP 5 months ago - 3 comments
Labels: kind/cleanup, dco-signoff: yes, lgtm, release-note-none, approved, size/L, area/build

#3340 - sync: release 0.39.x

Pull Request - State: closed - Opened by FedeDP 5 months ago - 6 comments
Labels: kind/cleanup, dco-signoff: yes, lgtm, release-note-none, size/M, approved

#3339 - Falco driver loader init container fails to download artifacts behind proxy

Issue - State: open - Opened by MaciekLeks 5 months ago - 2 comments
Labels: kind/bug

#3338 - fix(engine): sync outputs before printing stats at shutdown

Pull Request - State: closed - Opened by LucaGuerra 5 months ago - 4 comments
Labels: kind/bug, area/engine, release-note, dco-signoff: yes, lgtm, approved, size/XS

#3337 - fix(falco_metrics): fix prometheus metrics to be compliant with best practices

Pull Request - State: closed - Opened by ekoops 5 months ago - 3 comments
Labels: kind/bug, area/engine, release-note, dco-signoff: yes, lgtm, size/M, approved

#3336 - Metrics best practice review (3 issues found)

Issue - State: closed - Opened by leogr 5 months ago - 6 comments
Labels: kind/bug

#3335 - fix(falco): allow plugin init_config map in json schema

Pull Request - State: closed - Opened by LucaGuerra 5 months ago - 4 comments
Labels: kind/bug, area/engine, release-note, dco-signoff: yes, lgtm, size/M, approved

#3334 - fix(userspace/falco): properly account for plugin with CAP_PARSING when computing interesting sc set

Pull Request - State: closed - Opened by FedeDP 5 months ago - 2 comments
Labels: kind/bug, area/engine, release-note, dco-signoff: yes, lgtm, size/M, approved

#3333 - update(engine)!: print stats to stderr

Pull Request - State: closed - Opened by LucaGuerra 5 months ago - 5 comments
Labels: kind/cleanup, area/engine, release-note, dco-signoff: yes, approved, size/XS, do-not-merge/hold

#3332 - update(systemd): add falco.service alias to all systemd units

Pull Request - State: closed - Opened by ekoops 5 months ago - 5 comments
Labels: kind/feature, area/engine, release-note, dco-signoff: yes, lgtm, approved, size/XS

#3331 - sync: release 0.39.x

Pull Request - State: closed - Opened by FedeDP 5 months ago - 4 comments
Labels: dco-signoff: yes, lgtm, release-note-none, size/M, approved, area/build, kind/release

#3330 - update(cmake): bump libs to 0.18.0 and driver to 7.3.0+driver.

Pull Request - State: closed - Opened by FedeDP 5 months ago - 2 comments
Labels: release-note, dco-signoff: yes, lgtm, approved, size/XS, area/build, kind/release

#3329 - chore(userspace/falco): deprecate `cri` related CLI options.

Pull Request - State: closed - Opened by FedeDP 5 months ago - 2 comments
Labels: kind/cleanup, area/engine, release-note, dco-signoff: yes, lgtm, size/S, approved

#3328 - fix(userspace/engine): improve rule json schema to account for `source` and `required_plugin_versions`

Pull Request - State: closed - Opened by FedeDP 5 months ago - 5 comments
Labels: kind/bug, area/engine, dco-signoff: yes, lgtm, release-note-none, size/M, approved

#3327 - update(cmake): bump libs and driver to 0.18.0-rc2.

Pull Request - State: closed - Opened by FedeDP 5 months ago - 3 comments
Labels: release-note, dco-signoff: yes, lgtm, size/S, approved, area/build, kind/release

#3326 - [Tracking] Falco 0.39.0 Release

Issue - State: closed - Opened by alacuku 5 months ago - 4 comments
Labels: kind/bug, kind/documentation

#3325 - cleanup(falco): use header file for json schema

Pull Request - State: closed - Opened by LucaGuerra 5 months ago - 5 comments
Labels: kind/cleanup, area/engine, dco-signoff: yes, lgtm, release-note-none, approved, size/XXL

#3324 - update(falco_metrics): change prometheus rules metric naming

Pull Request - State: closed - Opened by incertum 5 months ago - 2 comments
Labels: kind/cleanup, area/engine, release-note, dco-signoff: yes, lgtm, size/S, approved

#3323 - ERROR: `Error: Initialization issues during scap_init`

Issue - State: open - Opened by OneideLuizSchneider 5 months ago - 48 comments
Labels: kind/bug

#3322 - update(engine): modify append_output format

Pull Request - State: closed - Opened by LucaGuerra 5 months ago - 10 comments
Labels: kind/feature, area/engine, dco-signoff: yes, lgtm, release-note-none, approved, size/L

#3321 - chore: scaffolding for enabling code formatting

Pull Request - State: closed - Opened by Andreagit97 5 months ago - 8 comments
Labels: kind/feature, kind/cleanup, dco-signoff: yes, lgtm, release-note-none, approved, size/XXL, area/build, area/ci

#3320 - update(cmake): bump libs and driver to 0.18.0-rc1.

Pull Request - State: closed - Opened by FedeDP 5 months ago - 3 comments
Labels: dco-signoff: yes, lgtm, release-note-none, size/S, approved, area/build, kind/release

#3319 - update(falco_metrics): rearrange evts and drops prometheus metrics

Pull Request - State: closed - Opened by incertum 5 months ago - 5 comments
Labels: kind/cleanup, area/engine, release-note, dco-signoff: yes, lgtm, approved, size/L

#3318 - can't install falco in CentOS 7.9

Issue - State: closed - Opened by yf-0dyssey 5 months ago - 13 comments
Labels: kind/bug

#3317 - fix(ci): restore master and release CI workflow permissions.

Pull Request - State: closed - Opened by FedeDP 5 months ago - 3 comments
Labels: kind/bug, dco-signoff: yes, lgtm, release-note-none, approved, size/XS, area/ci

#3316 - update(cmake): bump falcoctl to v0.10.0-rc1

Pull Request - State: closed - Opened by alacuku 5 months ago - 3 comments
Labels: dco-signoff: yes, lgtm, release-note-none, approved, size/XS

#3315 - ci(insecure-api): update semgrep docker image

Pull Request - State: closed - Opened by francesco-furlan 5 months ago - 4 comments
Labels: kind/cleanup, dco-signoff: yes, lgtm, release-note-none, approved, size/XS, area/ci

#3314 - new(falco): add json_include_message_property to have a message field without date and priority

Pull Request - State: closed - Opened by LucaGuerra 5 months ago - 5 comments
Labels: kind/feature, area/engine, release-note, dco-signoff: yes, lgtm, approved, size/L

#3313 - new(userspace/falco,userspace/engine): rule json schema validation

Pull Request - State: closed - Opened by FedeDP 5 months ago - 14 comments
Labels: kind/feature, area/engine, size/XL, release-note, dco-signoff: yes, lgtm, approved

#3312 - new(userspace/falco): added `--config-schema` action to print config schema

Pull Request - State: closed - Opened by FedeDP 5 months ago - 2 comments
Labels: kind/feature, area/engine, release-note, dco-signoff: yes, lgtm, size/M, approved

#3311 - cleanup(userspace/falco)!: drop deprecated -t,-T,-D options.

Pull Request - State: closed - Opened by FedeDP 5 months ago - 3 comments
Labels: kind/cleanup, area/engine, release-note, dco-signoff: yes, lgtm, size/M, approved

#3310 - new(falco): enable CLI options with -o key={object}

Pull Request - State: closed - Opened by LucaGuerra 5 months ago - 3 comments
Labels: kind/feature, area/engine, release-note, dco-signoff: yes, lgtm, size/M, approved

#3309 - Metrics: merge different metrics into series + labels

Issue - State: closed - Opened by Issif 5 months ago - 11 comments
Labels: kind/bug

#3308 - new(falco): add append_output configuration option with fields and format

Pull Request - State: closed - Opened by LucaGuerra 5 months ago - 10 comments
Labels: kind/feature, area/engine, release-note, dco-signoff: yes, lgtm, approved, size/XXL

#3307 - new(ci): use `zig` compiler instead of relying on centos7.

Pull Request - State: closed - Opened by FedeDP 5 months ago - 23 comments
Labels: kind/cleanup, release-note, dco-signoff: yes, lgtm, size/M, approved, area/ci

#3306 - falco pods are into Init:CrashLoopBackOff state

Issue - State: closed - Opened by rshiva777 5 months ago - 9 comments
Labels: kind/bug

#3305 - feat(cmake): add conditional builds for falcoctl and rules paths

Pull Request - State: closed - Opened by tembleking 5 months ago - 4 comments
Labels: kind/feature, dco-signoff: yes, lgtm, release-note-none, size/S, approved, area/build, kind/release

#3304 - Add fuzz-testing

Issue - State: closed - Opened by harshitasao 5 months ago - 5 comments
Labels: kind/feature, lifecycle/rotten

#3299 - fixed the token-permission and pinned-dependencies issue

Pull Request - State: closed - Opened by harshitasao 6 months ago - 8 comments
Labels: dco-signoff: yes, lgtm, release-note-none, size/M, approved, area/ci

#3297 - Improvement of OpenSSF Scorecard Score

Issue - State: closed - Opened by harshitasao 6 months ago - 6 comments
Labels: needs-kind, lifecycle/rotten

#3296 - `rules_file`/`rules_files` not being respected

Issue - State: open - Opened by kimberleyhallifax 6 months ago - 13 comments
Labels: kind/bug

GitHub / falcosecurity/falco issues and pull requests