mirror of
https://github.com/falcosecurity/falco.git
synced 2025-10-21 03:27:36 +00:00
94d89eaea2
New automated tests for testing parsing of multiple-doc rules files:
- invalid_{overwrite,append}_{macro,rule}_multiple_docs are just like
the previous versions, but with the multiple files combined into a
single multi-document file.
- multiple_docs combines the rules file from multiple_rules
The expect the same results and output as the multiple-file versions.
Signed-off-by: Mark Stemm <mark.stemm@gmail.com>
9 lines
110 B
YAML
9 lines
110 B
YAML
---
|
|
- macro: some macro
|
|
condition: evt.type=execve
|
|
---
|
|
- macro: some macro
|
|
condition: foo
|
|
append: true
|
|
|