Falco

All

50 repositories

evolution
Public
Evolution process of The Falco Project
kubernetes deployment examples k8s adoption falco
Go
•
Apache License 2.0
•44•52•6•1•Updated Apr 27, 2025Apr 27, 2025
test-infra
Public
Falco workflow & testing infrastructure
automation bots ci cd governance prow falco-drivers testing-infrastructure prow-jobs falco-prow
HCL
•
Apache License 2.0
•110•31•3•3•Updated Apr 27, 2025Apr 27, 2025
falco-talon
Public
Response Engine for managing threats in your Kubernetes
security falco response-engine kubernetes
Go
•
Apache License 2.0
•14•159•0•2•Updated Apr 25, 2025Apr 25, 2025
rules
Public
Falco rule repository
Go
•
Apache License 2.0
•72•121•7•3•Updated Apr 25, 2025Apr 25, 2025
charts
Public
Community managed Helm charts for running Falco with Kubernetes
Go
•
Apache License 2.0
•304•259•7•1•Updated Apr 25, 2025Apr 25, 2025
plugins
Public
Falco plugins registry
plugin registry falco falco-plugins
Go
•
Apache License 2.0
•86•93•7•3•Updated Apr 24, 2025Apr 24, 2025
falco
Public
Cloud Native Runtime Security
kubernetes security containers cncf cloud-native ebpf hacktoberfest falco runtime-security cncf-project
C++
•
Apache License 2.0
•924•7.8k•56•5•Updated Apr 24, 2025Apr 24, 2025
libs
Public
libsinsp, libscap, the kernel module driver, and the eBPF driver sources
kmod ebpf libsinsp falco-drivers libscap
C
•
Apache License 2.0
•175•265•40•13•Updated Apr 24, 2025Apr 24, 2025
falco-operator
Public
Kubernetes Operator for Falco
Go
•
Apache License 2.0
•1•6•0•0•Updated Apr 24, 2025Apr 24, 2025
falcosidekick
Public
Connect Falco to your ecosystem
docker kubernetes security hacktoberfest falco falco-event response-engine
Go
•
Apache License 2.0
•188•594•8•9•Updated Apr 21, 2025Apr 21, 2025
falcoctl
Public
Administrative tooling for Falco
Go
•
Apache License 2.0
•62•102•6•9•Updated Apr 21, 2025Apr 21, 2025
driverkit
Public
Kit for building Falco drivers: kernel modules or eBPF probes
Go
•
Apache License 2.0
•52•65•1•1•Updated Apr 18, 2025Apr 18, 2025
falco-website
Public
Source code of the official Falco website
security documentation containers cncf hacktoberfest
HTML
•
Creative Commons Attribution 4.0 International
•231•38•8•7•Updated Apr 17, 2025Apr 17, 2025
falcosidekick-ui
Public
A simple WebUI with latest events from Falco
Vue
•
Apache License 2.0
•15•119•3•3•Updated Apr 16, 2025Apr 16, 2025
client-go
Public
Go client and SDK for Falco
client falco go golang grpc
Go
•
Apache License 2.0
•19•54•1•1•Updated Apr 16, 2025Apr 16, 2025
falco-exporter
Public
Prometheus Metrics Exporter for Falco output events
metrics prometheus prometheus-exporter falco
Go
•
Apache License 2.0
•34•122•0•1•Updated Apr 16, 2025Apr 16, 2025
dbg-go
Public
A go tool to work with falcosecurity drivers build grid
Go
•
Apache License 2.0
•1•2•1•0•Updated Apr 14, 2025Apr 14, 2025
plugin-sdk-cpp
Public
Falco plugins SDK for C++
C++
•
Apache License 2.0
•11•3•0•1•Updated Apr 11, 2025Apr 11, 2025
kernel-testing
Public
Ansible playbooks to provision firecracker VMs and run Falco kernel tests
ansible kernel tests ebpf ignite falco runtime-security firecracker
Dockerfile
•
Apache License 2.0
•6•12•0•1•Updated Apr 7, 2025Apr 7, 2025
plugin-sdk-go
Public
Falco plugins SDK for Go
go sdk falco-plugins
Go
•
Apache License 2.0
•17•26•4•3•Updated Mar 31, 2025Mar 31, 2025
deploy-kubernetes
Public
Kubernetes deployment resources for Falco
k8s manifests falco k8s-deployment falcosidekick k8s-manifests falco-exporter
Apache License 2.0
•16•14•0•0•Updated Mar 28, 2025Mar 28, 2025
community
Public
The Falco Project Community
community office-hours cncf-falco falco-community
Apache License 2.0
•21•55•0•0•Updated Mar 28, 2025Mar 28, 2025
syscalls-bumper
Public
A tool to automatically update supported syscalls in libs
Go
•
Apache License 2.0
•5•5•0•0•Updated Mar 26, 2025Mar 26, 2025
kernel-crawler
Public
A tool to crawl Linux kernel versions
Python
•
Apache License 2.0
•13•17•0•0•Updated Mar 25, 2025Mar 25, 2025
falco-actions
Public
Run Falco in a GitHub Actions to detect suspicious behavior in your CI/CD
Python
•
Apache License 2.0
•6•31•2•0•Updated Mar 21, 2025Mar 21, 2025
falco-playground
Public
Web-application used to validate Falco rules and test against scap file
wasm hacktoberfest
TypeScript
•
Apache License 2.0
•17•19•0•0•Updated Mar 18, 2025Mar 18, 2025
elftoolchain
Public
Local version of https://sourceforge.net/projects/elftoolchain/
C
•
Other
•0•0•0•0•Updated Mar 18, 2025Mar 18, 2025
event-generator
Public
Generate a variety of suspect actions that are detected by Falco rulesets
go security syscall security-testing kubernetes-auditing
Go
•
Apache License 2.0
•42•103•2•0•Updated Mar 18, 2025Mar 18, 2025
plugin-sdk-rs
Public
Falco plugins SDK for Rust
Rust
•
Apache License 2.0
•2•7•0•3•Updated Mar 18, 2025Mar 18, 2025
cncf-green-review-testing
Public
Falco configurations intended for testing with the CNCF Green Reviews Working Group
Apache License 2.0
•3•3•0•0•Updated Feb 26, 2025Feb 26, 2025