Falco plugins SDK for Go
Go to file
dependabot[bot] 8b92aa348e build(deps): bump github/codeql-action in the actions group
Bumps the actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 3.29.0 to 3.29.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](ce28f5bb42...181d5eefc2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-07-15 11:23:46 +02:00
.github build(deps): bump github/codeql-action in the actions group 2025-07-15 11:23:46 +02:00
benchmarks/async docs: add SPDX license identifier 2023-11-23 16:54:46 +01:00
examples docs: add SPDX license identifier 2023-11-23 16:54:46 +01:00
pkg chore(pkg/sdk): rework handling of value offset arrays 2025-06-11 10:15:06 +02:00
.gitignore chore: add .vscode to the gitignore 2023-08-11 08:45:46 +02:00
.goreleaser.yml fix goreleaser 2024-10-09 16:52:14 +02:00
LICENSE Initial version 2021-09-08 12:38:48 -07:00
Makefile update(Makefile): pin libs version 2025-06-11 10:15:06 +02:00
OWNERS use git hash instead of tags 2024-10-09 16:52:14 +02:00
README.md fix(README.md): license badge link 2023-06-06 17:00:40 +02:00
go.mod build: upgrade to go 1.17 2025-06-11 10:15:06 +02:00
go.sum update: drop go.uber.org/multierr dependency 2023-05-24 18:56:07 +02:00
release.md docs(release.md): release process 2021-11-18 09:48:20 +01:00

README.md

plugin-sdk-go

Falco Core Repository Stable License

Go Reference Release Go Report Card

Introduction

This SDK facilitates writing plugins for Falco or application using Falcosecurity's libs.

Quick start

Before using this SDK, review the developer's guide which fully documents the API and provides best practices for writing plugins. The developer's guide includes a walkthrough of a plugin written in Go that uses this package.

For a quick start, you can refer to the provided examples:

What's next

When ready to release your plugin, make sure to register the plugin with the Falcosecurity organization by creating a PR to the falcosecurity/plugins respository with details on the new plugin. This ensures that a given ID is used by exactly one plugin with event sourcing capability, and allows authors of plugins with field extraction capability to coordinate about event source formats.

Join the Community

To get involved with The Falco Project please visit the community repository to find more.

How to reach out?

Contributing

See the CONTRIBUTING.md.

Security Audit

A third party security audit was performed by Cure53, you can see the full report here.

Reporting security vulnerabilities

Please report security vulnerabilities following the community process documented here.

License Terms

This project is licensed to you under the Apache 2.0 open source license.