Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
Update Falco version. Upstream version base is tag 0.17.2.
Went through the changelog for the last 2 minor versions and the only breaking change is to the filtering mechanism in sinsp, we do a very minor usage of this functionality for getting container events only, we should not be affected by it. All other changes didn't look like they could break anything on our end.
stackrox/falcosecurity-libs#80 fixes any compilation/runtime errors that may be found during testing, it needs to be merged before this PR.
Checklist
Automated testing
If any of these don't apply, please comment below.
Testing Performed
CI should be enough, but running tests on all archs for good measure.