mirror of
https://github.com/falcosecurity/falco.git
synced 2025-10-21 19:44:57 +00:00
Add a bunch of additional test cases for validating rules files. Each has a specific kind of parse failure and checks for the appropriate error info on stdout. Signed-off-by: Mark Stemm <mark.stemm@gmail.com>
3 lines
72 B
YAML
3 lines
72 B
YAML
- macro: dangling append
|
|
condition: and evt.type=execve
|
|
append: true |