Falco

All

49 repositories

evolution
Public
Evolution process of The Falco Project
kubernetes deployment examples k8s adoption falco
Go
•
Apache License 2.0
•43•50•7•2•Updated Mar 29, 2025Mar 29, 2025
test-infra
Public
Falco workflow & testing infrastructure
automation bots ci cd governance prow falco-drivers testing-infrastructure prow-jobs falco-prow
HCL
•
Apache License 2.0
•110•31•3•5•Updated Mar 29, 2025Mar 29, 2025
falco-talon
Public
Response Engine for managing threats in your Kubernetes
security falco response-engine kubernetes
Go
•
Apache License 2.0
•14•152•0•0•Updated Mar 29, 2025Mar 29, 2025
plugins
Public
Falco plugins registry
plugin registry falco falco-plugins
C++
•
Apache License 2.0
•83•90•6•2•Updated Mar 28, 2025Mar 28, 2025
deploy-kubernetes
Public
Kubernetes deployment resources for Falco
k8s manifests falco k8s-deployment falcosidekick k8s-manifests falco-exporter
Apache License 2.0
•16•14•0•0•Updated Mar 28, 2025Mar 28, 2025
libs
Public
libsinsp, libscap, the kernel module driver, and the eBPF driver sources
kmod ebpf libsinsp falco-drivers libscap
C
•
Apache License 2.0
•174•263•43•13•Updated Mar 28, 2025Mar 28, 2025
community
Public
The Falco Project Community
community office-hours cncf-falco falco-community
Apache License 2.0
•21•54•0•0•Updated Mar 28, 2025Mar 28, 2025
falco
Public
Cloud Native Runtime Security
kubernetes security containers cncf cloud-native ebpf hacktoberfest falco runtime-security cncf-project
C++
•
Apache License 2.0
•921•7.7k•55•0•Updated Mar 28, 2025Mar 28, 2025
charts
Public
Community managed Helm charts for running Falco with Kubernetes
Go
•
Apache License 2.0
•303•255•6•1•Updated Mar 27, 2025Mar 27, 2025
falco-website
Public
Source code of the official Falco website
security documentation containers cncf hacktoberfest
HTML
•
Creative Commons Attribution 4.0 International
•228•37•9•5•Updated Mar 27, 2025Mar 27, 2025
falcosidekick
Public
Connect Falco to your ecosystem
docker kubernetes security hacktoberfest falco falco-event response-engine
Go
•
Apache License 2.0
•186•580•8•6•Updated Mar 26, 2025Mar 26, 2025
syscalls-bumper
Public
A tool to automatically update supported syscalls in libs
Go
•
Apache License 2.0
•5•5•0•0•Updated Mar 26, 2025Mar 26, 2025
kernel-crawler
Public
A tool to crawl Linux kernel versions
Python
•
Apache License 2.0
•13•17•0•0•Updated Mar 25, 2025Mar 25, 2025
falcoctl
Public
Administrative tooling for Falco
Go
•
Apache License 2.0
•60•96•5•4•Updated Mar 25, 2025Mar 25, 2025
driverkit
Public
Kit for building Falco drivers: kernel modules or eBPF probes
Go
•
Apache License 2.0
•52•65•1•0•Updated Mar 24, 2025Mar 24, 2025
plugin-sdk-go
Public
Falco plugins SDK for Go
go sdk falco-plugins
Go
•
Apache License 2.0
•17•26•4•2•Updated Mar 24, 2025Mar 24, 2025
rules
Public
Falco rule repository
Go
•
Apache License 2.0
•71•114•7•2•Updated Mar 24, 2025Mar 24, 2025
dbg-go
Public
A go tool to work with falcosecurity drivers build grid
Go
•
Apache License 2.0
•1•2•1•0•Updated Mar 24, 2025Mar 24, 2025
client-go
Public
Go client and SDK for Falco
client falco go golang grpc
Go
•
Apache License 2.0
•19•53•0•1•Updated Mar 21, 2025Mar 21, 2025
falco-actions
Public
Run Falco in a GitHub Actions to detect suspicious behavior in your CI/CD
Python
•
Apache License 2.0
•6•24•1•0•Updated Mar 21, 2025Mar 21, 2025
plugin-sdk-cpp
Public
Falco plugins SDK for C++
C++
•
Apache License 2.0
•11•3•0•2•Updated Mar 20, 2025Mar 20, 2025
falco-playground
Public
Web-application used to validate Falco rules and test against scap file
wasm hacktoberfest
TypeScript
•
Apache License 2.0
•17•19•0•0•Updated Mar 18, 2025Mar 18, 2025
elftoolchain
Public
Local version of https://sourceforge.net/projects/elftoolchain/
C
•
Other
•0•0•0•0•Updated Mar 18, 2025Mar 18, 2025
event-generator
Public
Generate a variety of suspect actions that are detected by Falco rulesets
go security syscall security-testing kubernetes-auditing
Go
•
Apache License 2.0
•42•102•3•0•Updated Mar 18, 2025Mar 18, 2025
plugin-sdk-rs
Public
Falco plugins SDK for Rust
Rust
•
Apache License 2.0
•2•7•0•3•Updated Mar 18, 2025Mar 18, 2025
kernel-testing
Public
Ansible playbooks to provision firecracker VMs and run Falco kernel tests
ansible kernel tests ebpf ignite falco runtime-security firecracker
Dockerfile
•
Apache License 2.0
•6•11•0•1•Updated Mar 17, 2025Mar 17, 2025
falcosidekick-ui
Public
A simple WebUI with latest events from Falco
Vue
•
Apache License 2.0
•16•119•2•2•Updated Mar 13, 2025Mar 13, 2025
falco-exporter
Public
Prometheus Metrics Exporter for Falco output events
metrics prometheus prometheus-exporter falco
Go
•
Apache License 2.0
•34•122•0•1•Updated Mar 12, 2025Mar 12, 2025
cncf-green-review-testing
Public
Falco configurations intended for testing with the CNCF Green Reviews Working Group
Apache License 2.0
•3•3•0•0•Updated Feb 26, 2025Feb 26, 2025
testing
Public
All-purpose test suite for Falco and its ecosystem
Go
•
Apache License 2.0
•11•14•3•1•Updated Feb 18, 2025Feb 18, 2025