add sysdig/agent-slim to the user_trusted_images macro

Signed-off-by: kaizhe <derek0405@gmail.com>
falcosecurity · Jul 20, 2020 · c2ba758 · c2ba758
1 parent 20347b5
commit c2ba758
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml
@@ -1825,6 +1825,7 @@
 # and repeats it.
 - macro: user_trusted_containers
   condition: (container.image.repository endswith sysdig/agent or
+              container.image.repository endswith sysdig/agent-slim or
               container.image.repository endswith sysdig/node-image-analyzer)
 
 - list: sematext_images