poprhythm a44f35e758 falco: fix git-hook-tamper false-positiving on every gitea push
The rule checked proc.name against gitea's managed hook names, but git's
hook dispatcher always execs these as `bash ./hooks/<hookname>.d/gitea` -
proc.name is "bash" (the interpreter), never the hook name. That check
could never match, so this fired CRITICAL 3x (pre-receive/update/
post-receive) on every single push since it was added - including two
notifications the user got moments ago from this repo's own commits.

Fixed to check the actual invoked script path in proc.cmdline instead.
This commit's own push is the live verification.
2026-08-16 15:41:05 +00:00
2026-02-04 02:55:08 +00:00
2025-11-09 02:46:27 +00:00
2026-01-25 15:44:51 +00:00
2025-12-11 15:07:12 +00:00
2025-10-14 16:20:13 +00:00
2026-02-23 13:43:05 +00:00
2026-01-25 14:33:27 +00:00
2025-08-06 18:55:15 +00:00
S
Description
No description provided
Readme
877 KiB
Languages
Shell 58.2%
Python 28%
JavaScript 10.5%
HTML 2.3%
DIGITAL Command Language 0.6%
Other 0.4%