Leonardo Grasso

 @FedeDP :eye:

/assign @Andreagit97

> As you can see the `output:` is changed, but what scares me is that we don't have anymore `(command=cat /dev/null)` but we have `"proc.cmdline\":\"cat /dev/null\"`, not sure this is...

> EDIT: i was wrong, we actually support overriding values like: `-o "load_plugins[0]=k8saudit" -o "load_plugins[1]=json"` but the `includes` are loaded too early (ie: as soon as the yaml config is...

> > Does it get an error or silently fail? > > Silently fail. I think it must be documented in a follow-up PR (ie: when i split main Falco...

> We can add a warning perhaps? Yes, that's exactly what I meant.

> * [ ] split test in multiple tests :+1: > * [ ] support including directories; configs contained will be parsed in lexicographically order :+1: :+1: :+1: (pls make...

> > CI Build / check-engine-checksum (pull_request) Failing after 6s > > What ``` encoded checksum: 12cb01b5d2379547819a37a4656f1cef2952893ea1225de79614c673f386f645 current checksum: - current engine checksum differs from the one encoded in userspace/engine/falco_engine_version.h...

> Yes makes no sense considering that it was fine before the last commit (that didn't touch anything that could change the engine). Seems like a small bug in the...

Hey @incertum This is really interesting. Have we already collected a list of regressions we have encountered? :thinking: It would be useful to understand which aspects to focus on more.