Go Support Code For Writing Falcosecurity Plugins

plugin-sdk-go

Go package to facilitate writing Falco/Falco libs plugins.

Before using this package, review the developer's guide which fully documents the API and provides best practices for writing plugins. The developer's guide includes a walkthrough of a plugin written in Go that uses this package.

When ready to release your plugin, make sure to register the plugin with the Falcosecurity organization by creating a PR to modify the PLUGINS-REGISTRY.md file with details on the new plugin. This ensures that a given ID is used by exactly one source plugin, and allows source plugin authors and extractor plugin authors to coordinate about event source formats.

Owner
Mark Stemm
Mark Stemm
https://github.com/mstemm/plugin-sdk-go
Similar Resources

Telegraf - An agent for collecting, processing, aggregating, and writing metrics

Telegraf Telegraf is an agent for collecting, processing, aggregating, and writi

Feb 11, 2022

Boxygen is a container as code framework that allows you to build container images from code

Boxygen is a container as code framework that allows you to build container images from code, allowing integration of container image builds into other tooling such as servers or CLI tooling.

Dec 13, 2021

Tool to support the estimation for true sales prices for Danish properties.

Tool to support the estimation for true sales prices for Danish properties.

Hjem Dette værktøj er designet til at støtte huskøbere til at kunne danne sig et overblik historiske købspriser for nærområdet givet man har udset sig

Nov 9, 2022

Automatically create global & local Rate Limit in Istio, support EnvoyFilter versioning!

istio-ratelimit-operator Istio ratelimit operator provide an easy way to configure Global or Local Ratelimit in Istio mesh. Istio ratelimit operator a

Oct 24, 2022

reboot of Ebowla in order to simplify / modernize the codebase and provide ongoing support

Ebowla-2 reboot of https://github.com/Genetic-Malware/Ebowla in order to simplify / modernize the codebase and provide ongoing support Building / Runn

Nov 9, 2022

An operator to support Haschicorp Vault configuration workflows from within Kubernetes

Vault Config Operator This operator helps set up Vault Configurations. The main intent is to do so such that subsequently pods can consume the secrets

Sep 30, 2022

An operator to support Haschicorp Vault configuration workflows from within Kubernetes

An operator to support Haschicorp Vault configuration workflows from within Kubernetes

Vault Config Operator This operator helps set up Vault Configurations. The main intent is to do so such that subsequently pods can consume the secrets

Dec 19, 2022

K6 extension that adds support for browser automation and end-to-end web testing using playwright-go

K6 extension that adds support for browser automation and end-to-end web testing using playwright-go

k6 extension that adds support for browser automation and end-to-end web testing using playwright-go

Dec 21, 2022

ADK Node ( a.k.a ADKgo v2 ) for the ADK Mesh with full Smart Contract support [Mainnet]

ADKGo SmartNode (MAINNET v2) Official Golang implementation of the ADK Mesh protocol with Smart Contract funtionality BASE NODE SETUP STEPS (on clean

Nov 24, 2021
Comments
  • Reduce use of scap term in sdk

    Reduce use of scap term in sdk

    Prior versions used the term Scap in error codes because that's what the plugin framework itself uses when opening plugins to source and interact with events.

    However, the term scap/libscap won't make sense to plugin authors. To avoid this confusion use SSPlugin instead.

    Signed-off-by: Mark Stemm [email protected]

  • Initial version

    Initial version

    Initial version of plugin-sdk-go module, which provides support code for writing Falcosecurity plugins in go.

    Overview of packages within module:

    • sdk: (sdk.go): contains consts/types defined as a part of the plugins API
    • state: (state/): contains utility functions to hold go structs and reutrn them to/from the plugin framework as opaque handles.
    • wrappers: (wrappers/): contains utility functions to perform batched field extraction/asynchronous field extraction, handling the conversion to/from go types, iterating over structs, etc.

    Signed-off-by: Mark Stemm [email protected] Co-authored-by: Leonardo Grasso [email protected] Co-authored-by: Loris Degioanni [email protected]

Related tags
DevOps Tools plugin-sdk-go
Kong Api Gateway Plugins for golang

Prerequisites: Windows Docker. Build Command: docker build -t kong-plugins . Run Command: docker run -ti --rm --name kong-plugins -e "KONG_DATABASE=of

Aug 3, 2022
Installs containerd on Windows, optionally with default CNI plugins

containerd-installer Installs containerd on Windows, optionally with default CNI plugins Usage NAME: containerd-installer.exe - Install containerd

Nov 27, 2022
This is kubectl-plugins repository
 This is kubectl-plugins repository

golang CLI Template golang project template for building CLI Setup Setup by Command git clone https://github.com/mpppk/cli-template your_awesome_tool

Dec 20, 2021
Covering basics of Go by writing practical running code. microservice-http server-DAO-Kafka

go1 Covering all basics of Go by writing practical running code. Prerequisite: basic knowledge of c programming language as go is very similar to c in

Mar 30, 2022
sail is an operation framework based on Ansible/Helm. sail follows the principles of Infrastructure as Code (IaC), Operation as Code (OaC), and Everything as Code. So it is a tool for DevOps.

sail 中文文档 sail is an operation framework based on Ansible/Helm. sail follows the principles of Infrastructure as Code (IaC), Operation as Code (OaC)，a

Dec 16, 2021
A Terraform provider for writing ZIP archive files

Terraform Provider: Zip A Terraform provider for creating a dynamic ZIP archive.

Jan 11, 2022
A library for writing backup programs in Golang

Barkup godoc.org/github.com/keighl/barkup Barkup is a library for backing things up. It provides tools for writing bare-bones backup programs in Go. T

Nov 13, 2022
Navmux - Test project evaluate writing the equivalent of boat repro using go

navmux Test project evaluate writing the equivalent of boat repro using go. The

Jan 10, 2022
Bet - An exploration in writing structured Go tests using type parameters

Behavior Tests This is an exploration in writing structured Go tests using type

Feb 25, 2022
Provider-template - Template for writing providers for crossplane

provider-template provider-template is a minimal Crossplane Provider that is mea

Feb 3, 2022