Rules List

{{- $stableURL := printf "https://raw.githubusercontent.com/falcosecurity/rules/falco-rules-%s/rules/falco\_rules.yaml" .Site.Params.rulesStableVersion -}} {{- $sandboxURL := printf "https://raw.githubusercontent.com/falcosecurity/rules/falco-sandbox-rules-%s/rules/falco-sandbox\_rules.yaml" .Site.Params.rulesSandboxVersion -}} {{- $incubatingURL := printf "https://raw.githubusercontent.com/falcosecurity/rules/falco-incubating-rules-%s/rules/falco-incubating\_rules.yaml" .Site.Params.rulesIncubatingVersion -}} {{- $deprecatedURL := printf "https://raw.githubusercontent.com/falcosecurity/rules/falco-deprecated-rules-%s/rules/falco-deprecated\_rules.yaml" .Site.Params.rulesDeprecatedVersion -}} {{- $maturities := (dict "deprecated" $deprecatedURL "incubating" $incubatingURL "sandbox" $sandboxURL "stable" $stableURL) }}

{{- range $maturity, $url := $maturities }} {{- $dataYAML := resources.GetRemote $url -}} {{- $content := $dataYAML.Content | replaceRE #.*\n "" | transform.Unmarshal }} {{- range $content }} {{ if .rule }} {{ .rule }} {{ if eq .enabled false }} disabled {{ else }} enabled {{ end }} {{ .priority }}{{ $maturity }}

Description:

{{ .desc }}

Condition:

{{ .condition }}

Output:

{{ .output }}

Maturity: {{ $maturity }}

Priority: {{ .priority }}

Tags: {{ range .tags }} {{ . }} {{ end }}

Status: {{ if eq .enabled false }} disabled {{ else }} enabled {{ end }}

Link:

{{ end }} {{- end -}} {{- end -}}