The Falco Plugin Rust SDK allows you to write custom plugins for Falco, an open-source runtime security tool.
This project's goal is to walk you through the Falco Plugin architecture and help you get started writing plugins using the Rust SDK.
This repository has been set up as third-party Rustlings exercises. Rustlings is a project that teaches you interactively with small exercises you can complete in your own time.
Follow the official instructions to install Rustlings, then clone this repository, open a terminal in this directory, and run rustlings to get started with the exercises 🚀
The exercises are designed to be completed in order, with each one building on concepts from the previous ones. If you get stuck, please take a look at the resources section for help.
Similar to the core rustlings exercises, you will need to search for TODO and todo!() to discover the areas that need to be changed,
you can press h to get hints, and you may find a solution ready in the solutions/ directory.
In addition to that, you'll find DOCS with pointers to the relevant SDK documentation.
| Falco Documentation | https://falco.org/docs/ |
| Falco Plugin Architecture | https://falco.org/docs/plugins/architecture/ |
| Falco Plugin Rust SDK | https://github.com/falcosecurity/plugin-sdk-rs/ |
| Falco Plugin Rust SDK Documentation | https://falcosecurity.github.io/plugin-sdk-rs/falco_plugin/index.html |
| Journald plugin for Falco | https://github.com/gnosek/falco-journald-plugin |
To get involved with The Falco Project, please visit the community repository to find out more.
How to reach out?
- Join the #falco channel on the Kubernetes Slack
- Join the Falco mailing list
This project is licensed under the Apache 2.0 open source license.