Repositories list

• driverkit

  Public
  Kit for building Falco drivers: kernel modules or eBPF probes

  Go

  •

  Apache License 2.0

  •52•65•1•1•Updated Jan 13, 2025Jan 13, 2025

• syscalls-bumper

  Public
  A tool to automatically update supported syscalls in libs

  Go

  •

  Apache License 2.0

  •5•5•0•0•Updated Jan 13, 2025Jan 13, 2025

• falcosidekick

  Public
  Connect Falco to your ecosystem

  dockerkubernetessecurity+ 4hacktoberfestfalcofalco-eventresponse-engine

  Go

  •

  Apache License 2.0

  •182•565•5•2•Updated Jan 13, 2025Jan 13, 2025

• libs

  Public
  libsinsp, libscap, the kernel module driver, and the eBPF driver sources

  kmodebpflibsinsp+ 2falco-driverslibscap

  C

  •

  Apache License 2.0

  •168•240•52•19•Updated Jan 13, 2025Jan 13, 2025

• falco-website

  Public
  Source code of the official Falco website

  securitydocumentationcontainers+ 2cncfhacktoberfest

  HTML

  •

  Creative Commons Attribution 4.0 International

  •226•36•11•4•Updated Jan 13, 2025Jan 13, 2025

• falco

  Public
  Cloud Native Runtime Security

  kubernetessecuritycontainers+ 7cncfcloud-nativeebpfhacktoberfestfalcoruntime-securitycncf-project

  C++

  •

  Apache License 2.0

  •910•7.5k•78•2•Updated Jan 13, 2025Jan 13, 2025

• plugin-sdk-rs

  Public
  Falco plugins SDK for Rust

  Rust

  •

  Apache License 2.0

  •2•6•0•1•Updated Jan 13, 2025Jan 13, 2025

• charts

  Public
  Community managed Helm charts for running Falco with Kubernetes

  Go

  •

  Apache License 2.0

  •296•249•12•4•Updated Jan 13, 2025Jan 13, 2025

• falco-talon

  Public
  Response Engine for managing threats in your Kubernetes

  securityfalcoresponse-engine+ 1kubernetes

  Go

  •

  Apache License 2.0

  •13•147•3•3•Updated Jan 13, 2025Jan 13, 2025

• kernel-crawler

  Public
  A tool to crawl Linux kernel versions

  Python

  •

  Apache License 2.0

  •13•17•0•1•Updated Jan 13, 2025Jan 13, 2025

• plugins

  Public
  Falco plugins registry

  pluginregistryfalco+ 1falco-plugins

  Go

  •

  Apache License 2.0

  •83•87•7•1•Updated Jan 13, 2025Jan 13, 2025

• evolution

  Public
  Evolution process of The Falco Project

  kubernetesdeploymentexamples+ 3k8sadoptionfalco

  Go

  •

  Apache License 2.0

  •41•49•7•1•Updated Jan 13, 2025Jan 13, 2025

• test-infra

  Public
  Falco workflow & testing infrastructure

  automationbotsci+ 8cdgovernanceprowfalco-driverstesting-infrastructureprow-jobsfalco-prow+ 1

  HCL

  •

  Apache License 2.0

  •109•31•3•2•Updated Jan 13, 2025Jan 13, 2025

• falcoctl

  Public
  Administrative tooling for Falco

  Go

  •

  Apache License 2.0

  •59•89•4•3•Updated Jan 13, 2025Jan 13, 2025

• plugin-sdk-go

  Public
  Falco plugins SDK for Go

  gosdkfalco-plugins

  Go

  •

  Apache License 2.0

  •17•26•4•2•Updated Jan 13, 2025Jan 13, 2025

• event-generator

  Public
  Generate a variety of suspect actions that are detected by Falco rulesets

  gosecuritysyscall+ 2security-testingkubernetes-auditing

  Go

  •

  Apache License 2.0

  •40•97•6•6•Updated Jan 10, 2025Jan 10, 2025

• plugin-sdk-cpp

  Public
  Falco plugins SDK for C++

  C++

  •

  Apache License 2.0

  •11•3•0•1•Updated Jan 8, 2025Jan 8, 2025

• elftoolchain

  Public
  Local version of https://sourceforge.net/projects/elftoolchain/

  C

  •

  Other

  •0•0•0•0•Updated Jan 7, 2025Jan 7, 2025

• deploy-kubernetes

  Public
  Kubernetes deployment resources for Falco

  k8smanifestsfalco+ 4k8s-deploymentfalcosidekickk8s-manifestsfalco-exporter

  Apache License 2.0

  •16•14•0•0•Updated Dec 20, 2024Dec 20, 2024

• kernel-testing

  Public
  Ansible playbooks to provision firecracker VMs and run Falco kernel tests

  ansiblekerneltests+ 5ebpfignitefalcoruntime-securityfirecracker

  Dockerfile

  •

  Apache License 2.0

  •4•11•0•1•Updated Dec 20, 2024Dec 20, 2024

• falco-exporter

  Public
  Prometheus Metrics Exporter for Falco output events

  metricsprometheusprometheus-exporter+ 1falco

  Go

  •

  Apache License 2.0

  •34•121•0•0•Updated Dec 19, 2024Dec 19, 2024

• testing

  Public
  All-purpose test suite for Falco and its ecosystem

  Go

  •

  Apache License 2.0

  •11•14•3•1•Updated Dec 18, 2024Dec 18, 2024

• dbg-go

  Public
  A go tool to work with falcosecurity drivers build grid

  Go

  •

  Apache License 2.0

  •1•2•1•0•Updated Dec 16, 2024Dec 16, 2024

• falco-actions

  Public
  Run Falco in a GitHub Actions to detect suspicious behavior in your CI/CD

  Python

  •

  Apache License 2.0

  •4•8•0•0•Updated Dec 12, 2024Dec 12, 2024

• cncf-green-review-testing

  Public
  Falco configurations intended for testing with the CNCF Green Reviews Working Group

  Apache License 2.0

  •3•3•1•0•Updated Dec 12, 2024Dec 12, 2024

• falcosidekick-ui

  Public
  A simple WebUI with latest events from Falco

  Vue

  •

  Apache License 2.0

  •16•116•3•0•Updated Dec 9, 2024Dec 9, 2024

• community

  Public
  The Falco Project Community

  communityoffice-hourscncf-falco+ 1falco-community

  Apache License 2.0

  •21•53•0•0•Updated Nov 27, 2024Nov 27, 2024

• rules

  Public
  Falco rule repository

  Go

  •

  Apache License 2.0

  •70•101•7•2•Updated Oct 23, 2024Oct 23, 2024

• k8s-metacollector

  Public
  Fetches the metadata from kubernetes API server and dispatches them to Falco instances

  kubernetesmetadataapi-server+ 1falco

  Go

  •

  Apache License 2.0

  •5•15•0•0•Updated Jun 5, 2024Jun 5, 2024

• contrib

  Public
  Community sandbox to test-drive ideas/projects/code

  Python

  •

  Apache License 2.0

  •1•0•0•0•Updated May 21, 2024May 21, 2024