Focusing
-
Sysdig
- Milan
- https://twitter.com/leogrease
- @leogrease
Highlights
Block or Report
Block or report leogr
Report abuse
Contact GitHub support about this user’s behavior. Learn more about reporting abuse.
Report abusePinned
-
-
falcosecurity/libs Public
libsinsp, libscap, the kernel module driver, and the eBPF driver sources
-
-
Generate a variety of suspect actions that are detected by Falco rulesets
-
codenotary/immudb Public
immudb - world’s fastest immutable database, built on a zero trust model
-
codenotary/merkletree Public
A Merkle Hash Trees implementation according to RFC 6962, written in Go.
1,299 contributions in the last year
Less
More
Activity overview
Contributed to
falcosecurity/falco,
falcosecurity/libs,
falcosecurity/falco-website
and 5 other
repositories
Contribution activity
December 2021
Created 23 commits in 3 repositories
Reviewed 32 pull requests in 8 repositories
falcosecurity/libs
13 pull requests
- update: add a new plugin type for streamed scap data
- update: add clone3 syscall
- fix(userspace/libscap): do not return any value from void scap_fseek() function
- update: add a way to retrieve plugin framework's api version; plus add semver check when loading new plugin
- new(libsinsp,libscap): add is_exe_writable flag (take 2)
- Cleanup list fields
- new: add support for kernel side simple consumers
- refactor: generalize scap reading support and fix scap concatenation
- chore(libscap): change missed int32_t to ss_plugin_rc
- Reintroducing the token_bucket unit test adapted to gtest
-
Make the
scap-drivercomponent name configurable - Updated protobuf version for s390x
- Users and groups loading code fixes
falcosecurity/falco
9 pull requests
-
update(tests): remove
token_bucketunit tests - rules: add containerd socket to sensitive_mount macro
- fix(scripts): add eBPF jit warning
- docs: add jasondellaluce to OWNERS
- fix(rules): typo in "Create Symlink Over Sensitive Files" rule output
- Add ECR repository to rules
-
correctly clean loaded drivers in
falco-driver-loader - support arbitrary-depth nested values in YAML configuration
- rules: add support to openat2 in default ruleset