Skip to content

Commit

Permalink
fix(test): update expected test result for docker-compose scap file
Browse files Browse the repository at this point in the history
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
Co-authored-by: Luca Guerra <luca@guerra.sh>
  • Loading branch information
2 people authored and poiana committed Jun 23, 2022
1 parent c309107 commit 555bf99
Showing 1 changed file with 9 additions and 0 deletions.
9 changes: 9 additions & 0 deletions test/falco_traces.yaml.in
Original file line number Diff line number Diff line change
Expand Up @@ -164,3 +164,12 @@ traces: !mux
detect_level: ERROR
detect_counts:
- "Write below rpm database": 1

# This generates two notices starting from https://github.com/falcosecurity/falco/pull/2092
# When a new version of the scap files is generated this should then become "traces-positive"
docker-compose:
trace_file: traces-negative/docker-compose.scap
detect: True
detect_level: NOTICE
detect_counts:
- "Redirect STDOUT/STDIN to Network Connection in Container": 2

0 comments on commit 555bf99

Please sign in to comment.