Mattia Pagnozzi 477fcb56f1 Update rules to use more reliable container image predicates (#513) ...

Instead of using container.image, that always reports the raw string
used to spawn the container, switch to the more reliable
container.image.{repository,tag}, since they are guaranteed to report
the actual repository/tag of the container image.
This also give a little performance improvement since a single 'in'
predicate can now be used instead of a sequence of startswith.

2019-02-01 10:00:26 -08:00

..

application_rules.yaml

Rules versioning (#492)

2019-01-29 12:43:15 -08:00

CMakeLists.txt

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

falco_rules.local.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

falco_rules.yaml

Update rules to use more reliable container image predicates (#513)

2019-02-01 10:00:26 -08:00

k8s_audit_rules.yaml

Rules versioning (#492)

2019-01-29 12:43:15 -08:00