Falco (@falcosecurity)

Top repositories

1

falco

Cloud Native Runtime Security
C++
6,860
star
2

falcosidekick

Connect Falco to your ecosystem
Go
502
star
3

charts

Community managed Helm charts for running Falco with Kubernetes
Go
220
star
4

libs

libsinsp, libscap, the kernel module driver, and the eBPF driver sources
C
200
star
5

falco-talon

Response Engine for managing threats in your Kubernetes
Go
112
star
6

falco-exporter

Prometheus Metrics Exporter for Falco output events
Go
108
star
7

falcosidekick-ui

A simple WebUI with latest events from Falco
Vue
97
star
8

rules

Falco rule repository
Go
92
star
9

falcoctl

Administrative tooling for Falco
Go
81
star
10

event-generator

Generate a variety of suspect actions that are detected by Falco rulesets
Go
73
star
11

plugins

Falco plugins registry
Go
69
star
12

pdig

ptrace-based event producer for udig
C
65
star
13

driverkit

Kit for building Falco drivers: kernel modules or eBPF probes
Go
61
star
14

client-go

Go client and SDK for Falco
Go
52
star
15

community

The Falco Project Community
50
star
16

evolution

Evolution process of The Falco Project
Go
45
star
17

falco-website

Source code of the official Falco website
HTML
32
star
18

test-infra

Falco workflow & testing infrastructure
Jsonnet
30
star
19

plugin-sdk-go

Falco plugins SDK for Go
Go
23
star
20

client-py

Python client and SDK for Falco
Python
19
star
21

falco-playground

Web-application used to validate Falco rules and test against scap file
TypeScript
19
star
22

kernel-crawler

A tool to crawl Linux kernel versions
Python
17
star
23

k8s-metacollector

Fetches the metadata from kubernetes API server and dispatches them to Falco instances
Go
14
star
24

client-rs

The rust language implementation of the Falco client
Rust
14
star
25

kilt

Kilt is a project that defines how to inject foreign apps into containers
Go
13
star
26

testing

All-purpose test suite for Falco and its ecosystem
Go
11
star
27

kernel-testing

Ansible playbooks to provision firecracker VMs and run Falco kernel tests
Dockerfile
11
star
28

deploy-kubernetes

Kubernetes deployment resources for Falco
10
star
29

libs-sdk-go

Go SDK for Falco libs
Go
5
star
30

syscalls-bumper

A tool to automatically update supported syscalls in libs
Go
5
star
31

falco-aws-terraform

Terraform Module for Falco AWS Resources
HCL
5
star
32

plugin-sdk-rs

Falco plugins SDK for Rust
Rust
5
star
33

.github

Default community health files
4
star
34

pigeon

Secrets and config manager for Falco's infrastructure
Go
3
star
35

ebpf-probe

eBPF probe for syscall events
3
star
36

kernel-module

3
star
37

dbg-go

A go tool to work with falcosecurity drivers build grid
Go
2
star
38

plugin-sdk-cpp

Falco plugins SDK for C++
C++
2
star
39

libsinsp

System inspection library
2
star
40

libscap

2
star
41

cncf-green-review-testing

Falco configurations intended for testing with the CNCF Green Reviews Working Group
2
star
42

template-repository

Acts as a template for new repositories
1
star
43

advocacy

Advocacy machinery
1
star
44

peribolos-syncer

Tool to synchronize Peribolos configuration with GitHub people sources of truth.
Go
1
star
45

contrib

Community sandbox to test-drive ideas/projects/code
Python
1
star
46

flycheck-falco-rules

Falco Rules Syntax Checker for Emacs, Using Flycheck
Emacs Lisp
1
star