From a9b4e6c73e13c49f1c2240771baef8ead9539987 Mon Sep 17 00:00:00 2001 From: kaizhe Date: Mon, 20 Jul 2020 11:03:35 -0700 Subject: [PATCH] add sysdig/agent-slim to the user_trusted_images macro Signed-off-by: kaizhe --- rules/falco_rules.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index e1a5f84b..65e0e834 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -1825,6 +1825,7 @@ # and repeats it. - macro: user_trusted_containers condition: (container.image.repository endswith sysdig/agent or + container.image.repository endswith sysdig/agent-slim or container.image.repository endswith sysdig/node-image-analyzer) - list: sematext_images