plugins icon indicating copy to clipboard operation
plugins copied to clipboard

Falco plugins registry

Results 35 plugins issues
Sort by recently updated
recently updated
newest added

**What type of PR is this?** /kind feature **Any specific area of the project related to this PR?** /area plugins **What this PR does / why we need it**: This...

kind/feature
dco-signoff: yes
do-not-merge/hold
size/XXL
area/plugins
do-not-merge/invalid-owners-file

**What type of PR is this?** > Uncomment one (or more) `/kind ` lines: > /kind bug > /kind cleanup > /kind design > /kind documentation /kind failing-test > /kind...

dco-signoff: yes
kind/failing-test
area/build
size/S

**What type of PR is this?** > Uncomment one (or more) `/kind ` lines: /kind bug > /kind cleanup > /kind design > /kind documentation > /kind failing-test /kind feature...

kind/bug
kind/feature
dco-signoff: yes
size/M
area/build

**Motivation** Just like in AWS I want to be able to monitor my k8s audit logs in Azure. **Feature** A implementation of reading k8s_aduit logs in AKS through [Log Analytics...

kind/feature
lifecycle/stale

**Describe the bug** When loading rules, falco finds the rules file as invalid with the following error: ``` LOAD_ERR_COMPILE_OUTPUT (Error compiling output): .... has an invalid index argument not composed...

kind/bug
lifecycle/stale

**Motivation** As today most projects are multi-cloud, we would need k8saudit plug-in for at least AKS and GCP **Feature** k8s audit plug-ins for AKS and GKE **Alternatives** Today's alternative is...

kind/feature
help wanted

In January 2022, Falco introduced its first version of a Plugin framework to extend its available inputs. The framework has been enhanced in the following months to have something production...

kind/feature
lifecycle/rotten

**Describe the bug** the eks audit plugin is emitting events for "disallowed k8s user" for system users. There are rules to exclude system users but they are apparently not being...

kind/content
area/documentation

**Describe the bug** When I looked at the `k8s_audit_rules.yaml` of my falco deployment (uses the `k8saudit-eks` plugin), I noticed that there are rules that use variables which aren't defined anywhere....

kind/bug
lifecycle/stale

**What to document** We have no definite naming conventions for either commits or release notes (I don't think we have release notes at all). In Falco, we have a naming...

kind/documentation
lifecycle/stale