v0.15.0

Docker Image (x86_64 only)

• docker pull docker.io/aquasec/tracee:0.15.0

Docker Images (per architecture)

• docker pull docker.io/aquasec/tracee:x86_64-0.15.0
• docker pull docker.io/aquasec/tracee:aarch64-0.15.0

What's Changed

• workflow: add cosign to release snapshot by @josedonizetti in #3102
• workflow: add cosign to release snapshot by @josedonizetti in #3104
• workflow: ignore cosign prompt by @josedonizetti in #3105
• workflow: sign aquasec/tracee:x86_64-dev by @josedonizetti in #3106
• k8s: enrichment enabled by default by @josedonizetti in #3096
• docs: remove classic-docs by @josedonizetti in #3099
• workflow: sign release images by @josedonizetti in #3107
• refactor: add broadcast printer by @josedonizetti in #3090
• k8s: remove postee denpedency by @josedonizetti in #3089
• policies: fix args filtering by @josedonizetti in #3115
• tracee: add ready callback by @josedonizetti in #3117
• Add k8s configmap by @josedonizetti in #3091
• fix: file_modification not triggered in newer kernels by @roikol in #3127
• docs: fix mkdocs by @josedonizetti in #3131
• k8s: add readiness probe by @josedonizetti in #3128
• refactor: move PolicyFile to policy pkg by @josedonizetti in #3125
• k8s: add default signatures policy by @josedonizetti in #3130
• k8s: fix helm installation by @josedonizetti in #3134
• k8s: fix k8s installation docs by @josedonizetti in #3139
• k8s: add helm test workflow by @josedonizetti in #3138
• types: add DataSource type for signatures by @rafaeldtinoco in #3141
• 3026 rebased by @rafaeldtinoco in #3142
• ebpf: create function prototypes in all headers by @rafaeldtinoco in #3133
• policy: fix validation of args and retval by @josedonizetti in #3144
• logger: flags: add filter and filter-out by @geyslan in #3137
• docs: examples: place examples files by kind by @geyslan in #3146
• Add policy printer by @josedonizetti in #3126
• bpf attach raw tracepoint support (rebase of #3060) by @rafaeldtinoco in #3148
• Feature/capture read by @AlonZivony in #2356
• events: improve hidden_kernel_module by @OriGlassman in #3001
• types: add ContainerID field back by @NDStrahilevitz in #3155
• chore: restore old ContainerID field by @NDStrahilevitz in #3154
• bpf: fix int truncation in address holder by @geyslan in #3159
• docs: add data sources by @NDStrahilevitz in #3164
• ebpf: events: set policies for init events by @geyslan in #3162
• policy: add not-equal operator parsing by @geyslan in #3168
• printer: fix policy printer by @josedonizetti in #3149
• docs: update docs for bpf_attach event by @roikol in #3178
• docs: add read capture and new filters docs by @AlonZivony in #3157
• Fix docs by @josedonizetti in #3175
• policy: actions printers configured with -output by @josedonizetti in #3176
• events: fix hidden_kernel_module trigger time by @OriGlassman in #3189
• tracee: clean up untraced signatures by @NDStrahilevitz in #3193
• Revert "tracee: clean up untraced signatures" by @josedonizetti in #3194
• policy: fix output options by @josedonizetti in #3192
• tracee: fix output configuration via configfile by @josedonizetti in #3187
• types: change Event fields by @geyslan in #3196
• ebpf: Pipeline and BPF Network policy matching by @geyslan in #3183
• ebpf: bitwise should_submit_net_event return by @geyslan in #3198
• Fix path check multiple pids by @josedonizetti in #3205
• k8s: bump release tag to 0.15.0 by @josedonizetti in #3204
• workflow: fix contents permissions by @josedonizetti in #3206

Full Changelog: v0.14.2...v0.15.0