Issues

• 0.45 series kmod build failure on Raspberry Pi 5 (aarch64)

  kind/bug
  falcosecurity/falco#4057 · Filter by author GittyGitGitGitty opened on Oct 29, 2026

• proc.pname and proc.pexe are <NA> for container processes that existed before a Falco restart

  kind/bug
  falcosecurity/falco#4044 · Filter by author zhiland opened on Oct 20, 2026
  5

• program_output: alerts are silently dropped, or Falco is killed by SIGPIPE, when the program exits

  needs-kind
  falcosecurity/falco#4041 · Filter by author luiacuaniello opened on Oct 19, 2026
  1

• Add DNS events based on observed network traffic

  kind/feature
  falcosecurity/falco#4014 · Filter by author Percivalll opened on Sep 22, 2026

• arquivo regras_so.yaml

  kind/bug
  falcosecurity/falco#4009 · Filter by author pandora16i20-arch opened on Sep 19, 2026 · 0.46.0
  1

• Add source-aware detection readiness and integrity status

  kind/feature
  falcosecurity/falco#3968 · Filter by author riccardomenegazzo opened on Sep 2, 2026 · 0.46.0
  3

• [TRACKING] Falco 0.45.0 release

  kind/documentation
  falcosecurity/falco#3967 · Filter by author leogr opened on Sep 2, 2026 · 0.45.0
  27

  

• Pod restart

  kind/bug
  falcosecurity/falco#3963 · Filter by author Remblew opened on Aug 26, 2026 · 0.46.0
  6

  

• Can't build falco offline

  kind/bug
  falcosecurity/falco#3958 · Filter by author k0ste opened on Aug 4, 2026 · 0.46.0
  14

  

• Allow splitting N falco rules files into N configMap objects

  kind/feature
  falcosecurity/falco#3929 · Filter by author heitzflorian opened on Jun 25, 2026 · 0.46.0

• Proposal: Inline Causal Prevention for Falco Modern eBPF Probe

  kind/designkind/featurelifecycle/rotten
  falcosecurity/falco#3922 · Filter by author LemonScripter opened on Jun 13, 2026 · 0.46.0
  4

• Provide a default network policy in extra section for falco in falco chart

  kind/feature
  falcosecurity/falco#3912 · Filter by author heitzflorian opened on Jun 2, 2026 · 0.46.0
  2

• Add custom section for corporate CA Certificate in falco chart

  kind/featurelifecycle/rotten
  falcosecurity/falco#3907 · Filter by author heitzflorian opened on May 28, 2026 · 0.46.0
  2

• Unexpected connect event before listen for openssl s_server using kmod driver

  kind/buglifecycle/rotten
  falcosecurity/falco#3906 · Filter by author dasflk opened on May 27, 2026 · 0.46.0
  2

• Suspected Race Conditions in Falco

  kind/bug
  falcosecurity/falco#3789 · Filter by author marwinski opened on Jan 26, 2026 · 0.46.0
  8

  

• Falco 0.42.1 random memory usage spikes

  kind/buglifecycle/rotten
  falcosecurity/falco#3733 · Filter by author dmeetreey opened on Nov 10, 2025 · 0.46.0
  13

• accept events seemingly with reversed client and server IP/ports

  kind/bug
  falcosecurity/falco#3620 · Filter by author dnwe opened on Jun 16, 2025 · 0.46.0
  15

• [Prometheus metrics gaps] num_evts metric still missing in the Prometheus output

  help wantedkind/feature
  falcosecurity/falco#3584 · Filter by author incertum opened on May 28, 2025 · 0.46.0
  15

• Offer Falco rules json schema to schemastore.org

  help wantedkind/feature
  falcosecurity/falco#3432 · Filter by author ctdfo opened on Dec 17, 2024 · 0.46.0
  25

  

• [TRACKING] Rules syntax enhancements (backward-compatible)

  kind/featurelifecycle/stale
  falcosecurity/falco#3255 · Filter by author leogr opened on Jun 20, 2024 · 1.0.0
  16

  

• WIP: [TRACKING] Falco 1.0 items

  kind/featurelifecycle/stale
  falcosecurity/falco#3148 · Filter by author leogr opened on Mar 26, 2024 · 1.0.0
  18

  

• [TRACKING] Breaking changes in Falco 1.0.0

  kind/documentation
  falcosecurity/falco#3038 · Filter by author andreaterzolo opened on Jan 29, 2024 · 1.0.0
  28

  

• [DISCUSSION] deprecate / remove old internal drop stats?

  kind/documentationlifecycle/rotten
  falcosecurity/falco#2910 · Filter by author incertum opened on Nov 14, 2023 · 1.0.0
  28

  

• double qoute in rule's condition is not working as expected

  area/ruleskind/bug
  falcosecurity/falco#1859 · Filter by author developer-guy opened on Jan 19, 2022 · 1.0.0
  42

  

• build: syncing the repo metadata even when an RPM or DEB package is deleted afterword

  area/buildhelp wantedkind/feature
  falcosecurity/falco#1674 · Filter by author leogr opened on Jun 10, 2021 · 0.46.0
  49