Update Falco libs#76
Open
dcarolloz wants to merge 2 commits intosysflow-telemetry:masterfrom
Open
Conversation
Contributor
dcarolloz
commented
Apr 24, 2026
dcarolloz
commented
- Updated Falco libs to v0.23.2
- Updated Falco driver to v9.1.0
- Update Falcoctl to v0.12.2
- Replaced sha1 for FOID generation from OpenSSL to hash-library as OpenSSL was dropped from Falco libs
- Removed deps not anymore in Falco libs
- Disabled container functionalities as not available anymore out of the box in Falco libs (requires plugin but the go based plugin clashes with muslc)
- Added container filtering
- Update falco driver, libs modules - Integrate sha1 from hash-library as replacement of openSSL - Fix user/group fetching and filter out containerized processes - Disable container functionalities not available anymore OOTB from Falco - Adjust falco lib calls
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.