mirror of
https://github.com/falcosecurity/falco.git
synced 2025-10-22 03:49:36 +00:00
The main changes are to use falco_rules.yaml when using k8s_audit_rules.yaml, as it now depends on it, and to modify one of the tests to add granular exceptions instead of a single trusted list. Signed-off-by: Mark Stemm <mark.stemm@gmail.com>
12 lines
200 B
YAML
12 lines
200 B
YAML
- list: falco_sensitive_mount_images
|
|
items: [nginx]
|
|
append: true
|
|
|
|
- list: falco_privileged_images
|
|
items: [nginx]
|
|
append: true
|
|
|
|
- list: falco_hostnetwork_images
|
|
items: [nginx]
|
|
append: true
|