falcosecurity repositories

53 repositories

falco
Public
Cloud Native Runtime Security
kubernetes security containers
kubernetes security containers cncf cloud-native ebpf hacktoberfest falco runtime-security cncf-project
C++
•
Apache License 2.0
•1.1k•9.3k•39•24•Updated Sep 2, 2026Sep 2, 2026
falcoctl
Public
Administrative tooling for Falco
Go
•
Apache License 2.0
•67•129•4•3•Updated Sep 2, 2026Sep 2, 2026
test-infra
Public
Falco workflow & testing infrastructure
automation bots ci
automation bots ci cd governance prow testing-infrastructure prow-jobs falco-prow falco-drivers
Shell
•
Apache License 2.0
•109•33•2•3•Updated Sep 2, 2026Sep 2, 2026
falcosidekick
Public
Connect Falco to your ecosystem
docker kubernetes security
docker kubernetes security falco falco-event response-engine
Go
•
Apache License 2.0
•222•683•8•15•Updated Sep 2, 2026Sep 2, 2026
evolution
Public
Evolution process of The Falco Project
kubernetes deployment examples
kubernetes deployment examples k8s adoption falco
Go
•
Apache License 2.0
•48•63•3•1•Updated Sep 2, 2026Sep 2, 2026
falco-operator
Public
Kubernetes Operator for Falco
Go
•
Apache License 2.0
•7•46•9•8•Updated Sep 2, 2026Sep 2, 2026
plugins
Public
Falco plugins registry
plugin registry falco
plugin registry falco falco-plugins
Go
•
Apache License 2.0
•111•120•13•18•Updated Sep 2, 2026Sep 2, 2026
driverkit
Public
Kit for building Falco drivers: kernel modules or eBPF probes
Go
•
Apache License 2.0
•54•70•0•0•Updated Sep 2, 2026Sep 2, 2026
k8s-metacollector
Public
Fetches the metadata from kubernetes API server and dispatches them to Falco instances
kubernetes metadata api-server
kubernetes metadata api-server falco
Go
•
Apache License 2.0
•8•22•1•0•Updated Sep 2, 2026Sep 2, 2026
libs
Public
libsinsp, libscap, the kernel module driver, and the eBPF driver sources
kmod ebpf libsinsp
kmod ebpf libsinsp falco-drivers libscap
C
•
Apache License 2.0
•199•315•30•21•Updated Sep 2, 2026Sep 2, 2026
prempti
Public
Falco-powered policy and visibility layer for AI coding agents
Rust
•
Apache License 2.0
•22•201•6•2•Updated Sep 1, 2026Sep 1, 2026
elftoolchain
Public
Local version of https://sourceforge.net/projects/elftoolchain/
C
•
Other
•2•0•0•0•Updated Aug 31, 2026Aug 31, 2026
.project
Public
Project metadata for Falco - CNCF .project automation
1•0•1•1•Updated Aug 31, 2026Aug 31, 2026
community
Public
The Falco Project Community
community office-hours cncf-falco
community office-hours cncf-falco falco-community
Apache License 2.0
•23•57•0•0•Updated Aug 31, 2026Aug 31, 2026
rules
Public
Falco rule repository
Go
•
Apache License 2.0
•96•187•1•9•Updated Aug 31, 2026Aug 31, 2026
testing
Public
All-purpose test suite for Falco and its ecosystem
Go
•
Apache License 2.0
•12•12•0•0•Updated Aug 31, 2026Aug 31, 2026
falcosidekick-ui
Public
A simple WebUI with latest events from Falco
Vue
•
Apache License 2.0
•20•142•1•11•Updated Aug 31, 2026Aug 31, 2026
kernel-testing
Public
Ansible playbooks to provision firecracker VMs and run Falco kernel tests
ansible kernel tests
ansible kernel tests ebpf ignite falco runtime-security firecracker
Dockerfile
•
Apache License 2.0
•6•15•0•2•Updated Aug 29, 2026Aug 29, 2026
plugin-sdk-rs
Public
Falco plugins SDK for Rust
Rust
•
Apache License 2.0
•5•12•0•1•Updated Aug 29, 2026Aug 29, 2026
syscalls-bumper
Public
A tool to automatically update supported syscalls in libs
Go
•
Apache License 2.0
•4•5•0•4•Updated Aug 29, 2026Aug 29, 2026
kernel-crawler
Public
A tool to crawl Linux kernel versions
Python
•
Apache License 2.0
•16•25•0•8•Updated Aug 27, 2026Aug 27, 2026
falco-website
Public
Source code of the official Falco website
security documentation containers
security documentation containers cncf hacktoberfest
HTML
•
Creative Commons Attribution 4.0 International
•251•39•4•5•Updated Aug 24, 2026Aug 24, 2026
plugin-sdk-go
Public
Falco plugins SDK for Go
go sdk falco-plugins
go sdk falco-plugins
Go
•
Apache License 2.0
•19•26•1•3•Updated Aug 24, 2026Aug 24, 2026
contrib
Public
Community sandbox to test-drive ideas/projects/code
Python
•
Apache License 2.0
•0•0•0•0•Updated Aug 23, 2026Aug 23, 2026
falco-actions
Public
Run Falco in a GitHub Actions to detect suspicious behavior in your CI/CD
Python
•
Apache License 2.0
•13•52•1•1•Updated Aug 23, 2026Aug 23, 2026
falco-playground
Public
Web-application used to validate Falco rules and test against scap file
wasm hacktoberfest
wasm hacktoberfest
TypeScript
•
Apache License 2.0
•17•21•1•1•Updated Aug 20, 2026Aug 20, 2026
falco-talon
Public
Response Engine for managing threats in your Kubernetes
kubernetes security falco
kubernetes security falco response-engine
Go
•
Apache License 2.0
•20•215•1•6•Updated Aug 17, 2026Aug 17, 2026
falco-lsp
Public
Language Server Protocol and VSCode Extension for Falco rules
Go
•
Apache License 2.0
•1•4•1•6•Updated Aug 12, 2026Aug 12, 2026
charts
Public
Community managed Helm charts for running Falco with Kubernetes
Go
•
Apache License 2.0
•320•294•8•2•Updated Aug 11, 2026Aug 11, 2026
dbg-go
Public
A go tool to work with falcosecurity drivers build grid
Go
•
Apache License 2.0
•3•3•0•4•Updated Aug 6, 2026Aug 6, 2026

ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.

Repositories list

53 repositories