github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-06-30 16:42:14 +00:00
Code Issues Projects Releases Wiki Activity

rule update (macro: user_trusted_containers): add sysdig/node-image-analyzer to macro user_trusted_containers

Browse Source 
Signed-off-by: kaizhe <derek0405@gmail.com>
This commit is contained in:
kaizhe 2020-07-20 10:56:03 -07:00 committed by poiana
parent b86bc4a857
commit b32853798f
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
rules/falco_rules.yaml
View File

@ -1824,7 +1824,8 @@
# In this file, it just takes one of the images in trusted_containers # In this file, it just takes one of the images in trusted_containers
# and repeats it. # and repeats it.
- macro: user_trusted_containers - macro: user_trusted_containers
condition: (container.image.repository endswith sysdig/agent) condition: (container.image.repository endswith sysdig/agent or
container.image.repository endswith sysdig/node-image-analyzer)
- list: sematext_images - list: sematext_images
items: [docker.io/sematext/sematext-agent-docker, docker.io/sematext/agent, docker.io/sematext/logagent, items: [docker.io/sematext/sematext-agent-docker, docker.io/sematext/agent, docker.io/sematext/logagent,