Skip to content

Pull requests: falcosecurity/rules

New pull request New
5 Open 305 Closed
5 Open 305 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

new(rules): detect GPU/accelerator cryptojacking and device access (T1496) area/maturity-sandbox See the Rules Maturity Framework area/rules dco-signoff: yes kind/feature New feature or request size/M
#373 opened Jun 23, 2026 by DevamShah Loading…
2
build(deps): Bump actions/checkout from 6 to 7 dco-signoff: yes dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code size/S
#372 opened Jun 19, 2026 by dependabot Bot Loading…
1
new(rules): detect security tool impairment in containers (T1562.001) dco-signoff: yes size/M
#367 opened May 15, 2026 by JayKnowSo Loading…
7
docs: add STYLE_GUIDE.md for rules doc comments (closes #150) dco-signoff: yes size/XL
#364 opened Apr 29, 2026 by koiakoia Loading…
1
@leogr @ekoops
16
feat(rules): detect container shell spawn for MITRE T1059 dco-signoff: yes size/M
#363 opened Apr 20, 2026 by JayKnowSo Loading…
6
ProTip! Exclude everything labeled bug with -label:bug.