Repositories list

• deploy-kubernetes

  Public
  Kubernetes deployment resources for Falco

  k8smanifestsfalco+ 4k8s-deploymentfalcosidekickk8s-manifestsfalco-exporter

  Apache License 2.0

  •15•12•0•1•Updated Nov 10, 2024Nov 10, 2024

• evolution

  Public
  Evolution process of The Falco Project

  kubernetesdeploymentexamples+ 3k8sadoptionfalco

  Go

  •

  Apache License 2.0

  •39•48•6•1•Updated Nov 10, 2024Nov 10, 2024

• test-infra

  Public
  Falco workflow & testing infrastructure

  automationbotsci+ 8cdgovernanceprowfalco-driverstesting-infrastructureprow-jobsfalco-prow+ 1

  HCL

  •

  Apache License 2.0

  •109•31•4•4•Updated Nov 10, 2024Nov 10, 2024

• falco-talon

  Public
  Response Engine for managing threats in your Kubernetes

  securityfalcoresponse-engine+ 1kubernetes

  Go

  •

  Apache License 2.0

  •12•123•6•4•Updated Nov 9, 2024Nov 9, 2024

• charts

  Public
  Community managed Helm charts for running Falco with Kubernetes

  Go

  •

  Apache License 2.0

  •288•243•12•4•Updated Nov 8, 2024Nov 8, 2024

• libs

  Public
  libsinsp, libscap, the kernel module driver, and the eBPF driver sources

  kmodebpflibsinsp+ 2falco-driverslibscap

  C

  •

  Apache License 2.0

  •164•231•58•18•Updated Nov 8, 2024Nov 8, 2024

• plugin-sdk-cpp

  Public
  Falco plugins SDK for C++

  C++

  •

  Apache License 2.0

  •10•3•0•1•Updated Nov 8, 2024Nov 8, 2024

• plugins

  Public
  Falco plugins registry

  pluginregistryfalco+ 1falco-plugins

  Go

  •

  Apache License 2.0

  •78•85•9•2•Updated Nov 8, 2024Nov 8, 2024

• event-generator

  Public
  Generate a variety of suspect actions that are detected by Falco rulesets

  gosecuritysyscall+ 2security-testingkubernetes-auditing

  Go

  •

  Apache License 2.0

  •39•93•5•6•Updated Nov 7, 2024Nov 7, 2024

• falco

  Public
  Cloud Native Runtime Security

  kubernetessecuritycontainers+ 7cncfcloud-nativeebpfhacktoberfestfalcoruntime-securitycncf-project

  C++

  •

  Apache License 2.0

  •902•7.4k•75•5•Updated Nov 7, 2024Nov 7, 2024

• falco-website

  Public
  Source code of the official Falco website

  securitydocumentationcontainers+ 2cncfhacktoberfest

  HTML

  •

  Creative Commons Attribution 4.0 International

  •222•35•11•4•Updated Nov 6, 2024Nov 6, 2024

• syscalls-bumper

  Public
  A tool to automatically update supported syscalls in libs

  Go

  •

  Apache License 2.0

  •5•5•0•0•Updated Nov 6, 2024Nov 6, 2024

• testing

  Public
  All-purpose test suite for Falco and its ecosystem

  Go

  •

  Apache License 2.0

  •11•12•3•1•Updated Nov 6, 2024Nov 6, 2024

• falcosidekick

  Public
  Connect Falco to your ecosystem

  dockerkubernetessecurity+ 4hacktoberfestfalcofalco-eventresponse-engine

  Go

  •

  Apache License 2.0

  •179•548•11•2•Updated Nov 5, 2024Nov 5, 2024

• falcoctl

  Public
  Administrative tooling for Falco

  Go

  •

  Apache License 2.0

  •58•87•5•4•Updated Nov 4, 2024Nov 4, 2024

• falcosidekick-ui

  Public
  A simple WebUI with latest events from Falco

  Vue

  •

  Apache License 2.0

  •16•112•4•6•Updated Oct 30, 2024Oct 30, 2024

• plugin-sdk-rs

  Public
  Falco plugins SDK for Rust

  Rust

  •

  Apache License 2.0

  •1•6•0•0•Updated Oct 29, 2024Oct 29, 2024

• driverkit

  Public
  Kit for building Falco drivers: kernel modules or eBPF probes

  Go

  •

  Apache License 2.0

  •53•64•1•0•Updated Oct 29, 2024Oct 29, 2024

• kernel-crawler

  Public
  A tool to crawl Linux kernel versions

  Python

  •

  Apache License 2.0

  •13•17•0•0•Updated Oct 28, 2024Oct 28, 2024

• plugin-sdk-go

  Public
  Falco plugins SDK for Go

  gosdkfalco-plugins

  Go

  •

  Apache License 2.0

  •17•25•4•2•Updated Oct 28, 2024Oct 28, 2024

• rules

  Public
  Falco rule repository

  Go

  •

  Apache License 2.0

  •69•96•7•2•Updated Oct 23, 2024Oct 23, 2024

• falco-exporter

  Public
  Prometheus Metrics Exporter for Falco output events

  metricsprometheusprometheus-exporter+ 1falco

  Go

  •

  Apache License 2.0

  •34•121•1•1•Updated Oct 21, 2024Oct 21, 2024

• community

  Public
  The Falco Project Community

  communityoffice-hourscncf-falco+ 1falco-community

  Apache License 2.0

  •21•51•0•0•Updated Oct 9, 2024Oct 9, 2024

• dbg-go

  Public
  A go tool to work with falcosecurity drivers build grid

  Go

  •

  Apache License 2.0

  •1•2•1•0•Updated Sep 3, 2024Sep 3, 2024

• cncf-green-review-testing

  Public
  Falco configurations intended for testing with the CNCF Green Reviews Working Group

  Apache License 2.0

  •3•3•2•1•Updated Jul 22, 2024Jul 22, 2024

• k8s-metacollector

  Public
  Fetches the metadata from kubernetes API server and dispatches them to Falco instances

  kubernetesmetadataapi-server+ 1falco

  Go

  •

  Apache License 2.0

  •5•14•0•0•Updated Jun 5, 2024Jun 5, 2024

• contrib

  Public
  Community sandbox to test-drive ideas/projects/code

  Python

  •

  Apache License 2.0

  •1•0•0•0•Updated May 21, 2024May 21, 2024

• kernel-testing

  Public
  Ansible playbooks to provision firecracker VMs and run Falco kernel tests

  ansiblekerneltests+ 5ebpfignitefalcoruntime-securityfirecracker

  Dockerfile

  •

  Apache License 2.0

  •4•11•0•1•Updated May 10, 2024May 10, 2024

• pigeon

  Public
  Secrets and config manager for Falco's infrastructure

  Go

  •

  Apache License 2.0

  •0•3•0•0•Updated May 6, 2024May 6, 2024

• falco-playground

  Public
  Web-application used to validate Falco rules and test against scap file

  wasmhacktoberfest

  TypeScript

  •

  Apache License 2.0

  •17•19•0•0•Updated Apr 22, 2024Apr 22, 2024