falcosecurity/falco 0.39.0

on GitHub

Packages	Download
rpm-x86_64
deb-x86_64
tgz-x86_64
rpm-aarch64
deb-aarch64
tgz-aarch64

v0.39.0

Released on 2024-10-01

Breaking Changes ⚠️

• fix(falco_metrics)!: split tags label into multiple tag_-prefixed labels [#3337] - @ekoops
• fix(falco_metrics)!: use full name for configs and rules files [#3337] - @ekoops
• update(falco_metrics)!: rearrange n_evts_cpu and n_drops_cpu Prometheus metrics to follow best practices [#3319] - @incertum
• cleanup(userspace/falco)!: drop deprecated -t,-T,-D options. [#3311] - @FedeDP

Major Changes

• feat(stats): add host_netinfo networking information stats family [#3344] - @ekoops
• new(falco): add json_include_message_property to have a message field without date and priority [#3314] - @LucaGuerra
• new(userspace/falco,userspace/engine): rule json schema validation [#3313] - @FedeDP
• new(falco): introduce append_output configuration [#3308] - @LucaGuerra
• new(userspace/falco): added --config-schema action to print config schema [#3312] - @FedeDP
• new(falco): enable CLI options with -o key={object} [#3310] - @LucaGuerra
• new(config): add container_engines config to falco.yaml [#3266] - @incertum
• new(metrics): add host_ifinfo metric [#3253] - @incertum
• new(userspace,unit_tests): validate configs against schema [#3302] - @FedeDP

Minor Changes

• update(falco): upgrade libs to 0.18.1 [#3349] - @LucaGuerra
• update(systemd): users can refer to systemd falco services with a constistent unique alias falco.service [#3332] - @ekoops
• update(cmake): bump libs to 0.18.0 and driver to 7.3.0+driver. [#3330] - @FedeDP
• chore(userspace/falco): deprecate cri related CLI options. [#3329] - @FedeDP
• update(cmake): bumped falcoctl to v0.10.0 and rules to 3.2.0 [#3327] - @FedeDP
• update(falco_metrics): change prometheus rules metric naming [#3324] - @incertum

Bug Fixes

• fix(falco): allow disable_cri_async from both CLI and config [#3353] - @LucaGuerra
• fix(engine): sync outputs before printing stats at shutdown [#3338] - @LucaGuerra
• fix(falco): allow plugin init_config map in json schema [#3335] - @LucaGuerra
• fix(userspace/falco): properly account for plugin with CAP_PARSING when computing interesting sc set [#3334] - @FedeDP

Non user-facing changes

• feat(cmake): add conditional builds for falcoctl and rules paths [#3305] - @tembleking
• cleanup(falco): ignore lint commit [#3354] - @LucaGuerra
• chore(falco): apply code formatting [#3350] - @poiana
• chore: ignore_some_files for clang format [#3351] - @Andreagit97
• sync: release 0.39.x [#3340] - @FedeDP
• fix(userspace/engine): improve rule json schema to account for source and required_plugin_versions [#3328] - @FedeDP
• cleanup(falco): use header file for json schema [#3325] - @LucaGuerra
• update(engine): modify append_output format [#3322] - @LucaGuerra
• chore: scaffolding for enabling code formatting [#3321] - @Andreagit97
• update(cmake): bump libs and driver to 0.18.0-rc1. [#3320] - @FedeDP
• fix(ci): restore master and release CI workflow permissions. [#3317] - @FedeDP
• fixed the token-permission and pinned-dependencies issue [#3299] - @harshitasao
• update(cmake): bump falcoctl to v0.10.0-rc1 [#3316] - @alacuku
• ci(insecure-api): update semgrep docker image [#3315] - @francesco-furlan
• Add demo environment instructions and docker-config files [#3295] - @bbl232
• chore(deps): Bump submodules/falcosecurity-rules from baecf18 to b6ad373 [#3301] - @dependabot[bot]
• update(cmake): bump libs and driver to latest master [#3283] - @jasondellaluce
• chore(deps): Bump submodules/falcosecurity-rules from 342b20d to baecf18 [#3298] - @dependabot[bot]
• chore(deps): Bump submodules/falcosecurity-rules from 068f0f2 to 342b20d [#3288] - @dependabot[bot]
• vote: add sgaist to OWNERS [#3264] - @sgaist
• Add Tulip Retail to adopters list [#3291] - @bbl232
• chore(deps): Bump submodules/falcosecurity-rules from 28b98b6 to 068f0f2 [#3282] - @dependabot[bot]
• chore(deps): Bump submodules/falcosecurity-rules from c0a9bf1 to 28b98b6 [#3267] - @dependabot[bot]
• Added the OpenSSF Scorecard Badge [#3250] - @harshitasao
• chore(deps): Bump submodules/falcosecurity-rules from ea57e78 to c0a9bf1 [#3247] - @dependabot[bot]
• update(cmake,userspace): bump libs and driver to latest master. [#3263] - @FedeDP
• If rule compilation fails, return immediately [#3260] - @mstemm
• new(userspace/engine): generalize indexable ruleset [#3251] - @mstemm
• update(cmake): bump libs to master. [#3249] - @FedeDP
• chore(deps): Bump submodules/falcosecurity-rules from df963b6 to ea57e78 [#3240] - @dependabot[bot]
• chore(ci): enable dummy tests on the testing framework. [#3233] - @FedeDP
• chore(deps): Bump submodules/falcosecurity-rules from 679a50a to df963b6 [#3231] - @dependabot[bot]
• update(cmake): bump libs and driver to master. [#3225] - @FedeDP
• chore(deps): Bump submodules/falcosecurity-rules from 9e56293 to 679a50a [#3222] - @dependabot[bot]
• update(docs): update CHANGELOG for 0.38.0 (master branch) [#3224] - @LucaGuerra

Statistics

Release Manager @FedeDP