Docker Image (x86_64 only)
docker pull docker.io/aquasec/tracee:0.15.0
Docker Images (per architecture)
docker pull docker.io/aquasec/tracee:x86_64-0.15.0docker pull docker.io/aquasec/tracee:aarch64-0.15.0
What's Changed
- workflow: add cosign to release snapshot by @josedonizetti in #3102
- workflow: add cosign to release snapshot by @josedonizetti in #3104
- workflow: ignore cosign prompt by @josedonizetti in #3105
- workflow: sign aquasec/tracee:x86_64-dev by @josedonizetti in #3106
- k8s: enrichment enabled by default by @josedonizetti in #3096
- docs: remove classic-docs by @josedonizetti in #3099
- workflow: sign release images by @josedonizetti in #3107
- refactor: add broadcast printer by @josedonizetti in #3090
- k8s: remove postee denpedency by @josedonizetti in #3089
- policies: fix args filtering by @josedonizetti in #3115
- tracee: add ready callback by @josedonizetti in #3117
- Add k8s configmap by @josedonizetti in #3091
- fix: file_modification not triggered in newer kernels by @roikol in #3127
- docs: fix mkdocs by @josedonizetti in #3131
- k8s: add readiness probe by @josedonizetti in #3128
- refactor: move PolicyFile to policy pkg by @josedonizetti in #3125
- k8s: add default signatures policy by @josedonizetti in #3130
- k8s: fix helm installation by @josedonizetti in #3134
- k8s: fix k8s installation docs by @josedonizetti in #3139
- k8s: add helm test workflow by @josedonizetti in #3138
- types: add DataSource type for signatures by @rafaeldtinoco in #3141
- 3026 rebased by @rafaeldtinoco in #3142
- ebpf: create function prototypes in all headers by @rafaeldtinoco in #3133
- policy: fix validation of args and retval by @josedonizetti in #3144
- logger: flags: add filter and filter-out by @geyslan in #3137
- docs: examples: place examples files by kind by @geyslan in #3146
- Add policy printer by @josedonizetti in #3126
- bpf attach raw tracepoint support (rebase of #3060) by @rafaeldtinoco in #3148
- Feature/capture read by @AlonZivony in #2356
- events: improve hidden_kernel_module by @OriGlassman in #3001
- types: add ContainerID field back by @NDStrahilevitz in #3155
- chore: restore old ContainerID field by @NDStrahilevitz in #3154
- bpf: fix int truncation in address holder by @geyslan in #3159
- docs: add data sources by @NDStrahilevitz in #3164
- ebpf: events: set policies for init events by @geyslan in #3162
- policy: add not-equal operator parsing by @geyslan in #3168
- printer: fix policy printer by @josedonizetti in #3149
- docs: update docs for bpf_attach event by @roikol in #3178
- docs: add read capture and new filters docs by @AlonZivony in #3157
- Fix docs by @josedonizetti in #3175
- policy: actions printers configured with -output by @josedonizetti in #3176
- events: fix hidden_kernel_module trigger time by @OriGlassman in #3189
- tracee: clean up untraced signatures by @NDStrahilevitz in #3193
- Revert "tracee: clean up untraced signatures" by @josedonizetti in #3194
- policy: fix output options by @josedonizetti in #3192
- tracee: fix output configuration via configfile by @josedonizetti in #3187
- types: change Event fields by @geyslan in #3196
- ebpf: Pipeline and BPF Network policy matching by @geyslan in #3183
- ebpf: bitwise should_submit_net_event return by @geyslan in #3198
- Fix path check multiple pids by @josedonizetti in #3205
- k8s: bump release tag to 0.15.0 by @josedonizetti in #3204
- workflow: fix contents permissions by @josedonizetti in #3206
Full Changelog: v0.14.2...v0.15.0