From 1bb0a9b44acdda38c96dbebca7e809cb35f97ca1 Mon Sep 17 00:00:00 2001 From: kaizhe Date: Thu, 13 Aug 2020 10:46:36 -0700 Subject: [PATCH] minor fix Signed-off-by: kaizhe --- rules/falco_rules.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index 80017226..a81fe47d 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -1462,7 +1462,7 @@ items: [] - macro: user_read_sensitive_file_containers - condition: (container and container.image.repository in read_sensitive_file_images) + condition: (container and container.image.repository in (read_sensitive_file_images)) - rule: Read sensitive file untrusted desc: >