falcosecurity/falcosidekick 2.27.0

on GitHub

2.27.0 - 2022-12-13

New

• New output: Yandex Data Streams (PR#336 thanks to @preved911)
• New output: Node-Red (PR#337
• New output: MQTT (PR#338
• Templated fields: custom fields generated with Go templates (PR#350
• New output: Zincsearch (PR#360
• New output: Gotify (PR#362
• New output: Spyderbat (PR#368 thanks to @spyder-kyle)
• New output: Tekton (PR#371
• New output: TimescaleDB (PR#378 thanks to @jagretti)
• New output: AWS Security Lake (PR#387

Enhancement

• SMTP output now uses any SASL auth mechanism (PR#341 thanks to @Lowaiz)
• Bind Policy Reports to Namespace by ownerReference (PR#346
• Add extra labels and annotations for AlertManager payloads (PR#347 thanks to @Lowaiz)
• Update default type for Elasticsearch documents (PR#349
• Support env vars in custom fields (PR#353
• Update format + default endpoint for Loki output (PR#356
• Determine resource names + owner ref for Policy Reports (PR#358
• Update Influxdb output to use API Token and /api/v2 endpoint (PR#359
• Allow to override the Slack channel (PR#366
• Add From, To and Date headers in SMTP payload (PR#364
• Improve the check of the payload from Falco, it allows now to have an empty output (PR#372
• Allow to set user and api key for Loki output for Grafana Logs (PR#379
• Add hostname in json payload for all outputs (PR#383 thanks to @Lowaiz)
• Add SASL authentication for Kafka output (PR#385 thanks to @Lowaiz) and @lyoung-confluent)
• Support CEF format for Syslog output (PR#386
• Allow to disable STS check for AWS output (PR#387

Fix

• Fix priority label was replaced by source in AlertManager payload (PR#340 thanks to @tks98)
• Fix missing cert checks + fix inverted logic to use them in codebase (PR#345
• Fix race condition when headers are added to POST requests (PR#380 thanks to @bc-sb)

New Contributors

• @preved911 made their first contribution in #336
• @tks98 made their first contribution in #340
• @jasondellaluce made their first contribution in #342
• @Lowaiz made their first contribution in #341
• @pcgeek86 made their first contribution in #367
• @spyder-kyle made their first contribution in #368
• @jagretti made their first contribution in #378
• @bc-sb made their first contribution in #376

Full Changelog: 2.26.0...2.27.0