v0.9.3

This version continues the trend within the v0.9.X series of Tracee versions, quickly fixing bugs and updating documentation in small and fast coming releases. We're happy that this trend makes Tracee a more reliable system to depend on for having a stable latest version.

See the full release notes and closed milestone issues for highlights.

Docker images

• docker pull docker.io/aquasec/tracee:0.9.3 (embedded eBPF CO-RE obj with BTFHUB support)
• docker pull docker.io/aquasec/tracee:full-0.9.3 (compiles non CO-RE eBPF object on startup)

Full Changelog

b784993 - workflows: add stream8 back (#2327) (Rafael David Tinoco)
20daa29 - Documentation: Fix broken links, move deep dive section (#2322) (grantseltzer)
430c073 - ebpf: fix mem_prot_alert invalid args (#2324) (Yaniv Agman)
a37dcf6 - workflows: change pr to new runners (#2325) (Rafael David Tinoco)
ea11896 - Run integration test triggers in own PID (#2323) (grantseltzer)
380070e - flags: add a test for prepareEventsToTrace (Nadav Strahilevitz)
766f588 - events: add a "containers" set (Nadav Strahilevitz)
31d09d4 - filter: fix wildcard not working for events (Nadav Strahilevitz)
ca2a14e - bucketscache: add RWMutex (#2316) (Nadav Strahilevitz)
534b6a4 - types/trace: add u8 type support to UnmarshalJson (#2312) (Alon Zivony)
4ff5914 - tracee: remove invalid events from tailcalls (#2310) (Nadav Strahilevitz)
f51b41a - filters: flags: change mntns and pidns filter expressions (#2302) (Geyslan Gregório)
df6d661 - logger: move logger start to init functions (#2252) (Geyslan Gregório)