aquasecurity / aquasecurity/tracee

tracee: refactor remove protocol.Event

Open
#2,733 3 comments 0 reactions 1 assignee Claimed by @yanivagman View on GitHub
Dominant language
Go
Stars
4.6k
Forks
507
Avg merge
2d 8h
Merged PRs (30d)
9

Description

`tracee-ebpf | tracee-rules` have a generic protocol in between for communication (protocol.Event). This should be removed once the unified binary (tracee) becomes the default solution, and we decide to drop `tracee-ebpf`, and `tracee-rules`.

With `signatures` as part of the pipeline, all the communication could be done with `trace.Event`instead of converting back and forth from [`tracee.Event -> protocol.Event`](https://github.com/aquasecurity/tracee/blob/main/pkg/ebpf/rule_engine.go#L47)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.