falco

mirror of https://github.com/falcosecurity/falco.git synced 2025-10-21 11:29:26 +00:00

Files

Mark Stemm 05282f3976 Proposal on better exception handling

This proposes adding exceptions as a first class object to falco rules
files.

It adds a new key "exceptions" to rule objects that allows a rule
writer to define tuples of field names that comprise an exception, and a
new top level object "exception" that contains lists of tuples of field
values that define exceptions to rules.

Signed-off-by: Mark Stemm <mark.stemm@gmail.com>

2021-01-08 17:53:08 +01:00

20190826-grpc-output-single-alert-sequence.png

docs(proposals): design details for the gRPC output

2019-09-25 14:37:46 +03:00

20190826-grpc-outputs.md

bc(userspace/falco): the Falco gRPC Outputs API are now "falco.outputs.service/get" and "falco.outputs.service/sub"

2020-06-29 20:42:50 +02:00

20190909-psp-rules-support.md

chore(proposals): apply code review about PSP rules proposal

2019-10-14 13:59:15 +02:00

20191030-api.md

update(proposals): goals, non-goals and use cases of the Falco API