mirror of
https://github.com/falcosecurity/falco.git
synced 2025-10-21 11:29:26 +00:00
df219b5e1d
Add new test cases for a rule with an unknown source *and* an exception, and a macro with an unknown source. The first results in a rule warning (and no error), and the second prints an error and skips. Signed-off-by: Mark Stemm <mark.stemm@gmail.com>
5 lines
83 B
YAML
5 lines
83 B
YAML
- macro: Some Cloudtrail Macro
|
|
condition: aws.user=bob
|
|
source: aws_cloudtrail
|
|
|