diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index ae0b2d50..93cc52ac 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -749,7 +749,7 @@ monitoring_binaries, gitlab_binaries, initdb, pg_ctl, awk, falco, cron, erl_child_setup, ceph, PM2, pycompile, py3compile, hhvm, npm, mysql_install_d, serf, runsv, supervisord, varnishd, crond, logrotate, timeout, tini, - xrdb, xfce4-session) + xrdb, xfce4-session, weave) and not trusted_containers and not shell_spawning_containers and not parent_java_running_echo