Issues

• file_output with keep_alive: true silently stops writing after one failed write (for example ENOSPC) and never resumes until SIGUSR1 or restart

  kind/bug
  falcosecurity/falco#4035 · Filter by author perezd opened on Oct 15, 2026

• Discrepancy in falcosecurity_scap_n_evts_total metric between host (systemd) and DaemonSet deployments under identical syscall workload

  kind/bug
  falcosecurity/falco#4021 · Filter by author ilyagoz opened on Sep 28, 2026

• modern_ebpf: BPF program 'signal_deliver' fails to load with errno 13 on kernel 7.2.7 (Fedora 44)

  kind/bug
  falcosecurity/falco#4017 · Filter by author Cherkah opened on Sep 24, 2026 · 0.45.1
  7

  

• Add DNS events based on observed network traffic

  kind/feature
  falcosecurity/falco#4014 · Filter by author Percivalll opened on Sep 22, 2026

• arquivo regras_so.yaml

  kind/bug
  falcosecurity/falco#4009 · Filter by author pandora16i20-arch opened on Sep 19, 2026 · 0.46.0
  1

• Add source-aware detection readiness and integrity status

  kind/feature
  falcosecurity/falco#3968 · Filter by author riccardomenegazzo opened on Sep 2, 2026 · 0.46.0
  3

• [TRACKING] Falco 0.45.0 release

  kind/documentation
  falcosecurity/falco#3967 · Filter by author leogr opened on Sep 2, 2026 · 0.45.0
  25

  

• Pod restart

  kind/bug
  falcosecurity/falco#3963 · Filter by author Remblew opened on Aug 26, 2026 · 0.46.0
  6

  

• Can't build falco offline

  kind/bug
  falcosecurity/falco#3958 · Filter by author k0ste opened on Aug 4, 2026 · 0.46.0
  14

  

• Allow splitting N falco rules files into N configMap objects

  kind/feature
  falcosecurity/falco#3929 · Filter by author heitzflorian opened on Jun 25, 2026 · 0.46.0

• Proposal: Inline Causal Prevention for Falco Modern eBPF Probe

  kind/designkind/featurelifecycle/stale
  falcosecurity/falco#3922 · Filter by author LemonScripter opened on Jun 13, 2026 · 0.46.0
  3

• Provide a default network policy in extra section for falco in falco chart

  kind/feature
  falcosecurity/falco#3912 · Filter by author heitzflorian opened on Jun 2, 2026 · 0.46.0
  2

• Add custom section for corporate CA Certificate in falco chart

  kind/featurelifecycle/stale
  falcosecurity/falco#3907 · Filter by author heitzflorian opened on May 28, 2026 · 0.46.0
  1

• Unexpected connect event before listen for openssl s_server using kmod driver

  kind/buglifecycle/stale
  falcosecurity/falco#3906 · Filter by author dasflk opened on May 27, 2026 · 0.46.0
  1

• Suspected Race Conditions in Falco

  kind/bug
  falcosecurity/falco#3789 · Filter by author marwinski opened on Jan 26, 2026 · 0.46.0
  8

  

• Falco 0.42.1 random memory usage spikes

  kind/buglifecycle/rotten
  falcosecurity/falco#3733 · Filter by author dmeetreey opened on Nov 10, 2025 · 0.46.0
  13

• Fails to suppress unwanted alerts upon startup

  kind/buglifecycle/rotten
  falcosecurity/falco#3724 · Filter by author NT-florianernst opened on Oct 27, 2025 · 0.46.0
  6

• accept events seemingly with reversed client and server IP/ports

  kind/bug
  falcosecurity/falco#3620 · Filter by author dnwe opened on Jun 16, 2025 · 0.46.0
  15

• [Prometheus metrics gaps] num_evts metric still missing in the Prometheus output

  help wantedkind/feature
  falcosecurity/falco#3584 · Filter by author incertum opened on May 28, 2025 · 0.46.0
  15

• Offer Falco rules json schema to schemastore.org

  help wantedkind/feature
  falcosecurity/falco#3432 · Filter by author ctdfo opened on Dec 17, 2024 · 0.46.0
  25

  

• [TRACKING] Rules syntax enhancements (backward-compatible)

  kind/featurelifecycle/stale
  falcosecurity/falco#3255 · Filter by author leogr opened on Jun 20, 2024 · 1.0.0
  16

  

• WIP: [TRACKING] Falco 1.0 items

  kind/feature
  falcosecurity/falco#3148 · Filter by author leogr opened on Mar 26, 2024 · 1.0.0
  17

  

• [TRACKING] Breaking changes in Falco 1.0.0

  kind/documentation
  falcosecurity/falco#3038 · Filter by author andreaterzolo opened on Jan 29, 2024 · 1.0.0
  28

  

• [DISCUSSION] deprecate / remove old internal drop stats?

  kind/documentationlifecycle/stale
  falcosecurity/falco#2910 · Filter by author incertum opened on Nov 14, 2023 · 1.0.0
  27

  

• double qoute in rule's condition is not working as expected

  area/ruleskind/bug
  falcosecurity/falco#1859 · Filter by author developer-guy opened on Jan 19, 2022 · 1.0.0
  42