{"id":13414473,"url":"https://github.com/aquasecurity/tracee","last_synced_at":"2025-05-14T07:07:37.409Z","repository":{"id":37285339,"uuid":"209313689","full_name":"aquasecurity/tracee","owner":"aquasecurity","description":"Linux Runtime Security and Forensics using eBPF","archived":false,"fork":false,"pushed_at":"2025-05-05T12:57:46.000Z","size":180864,"stargazers_count":3861,"open_issues_count":222,"forks_count":444,"subscribers_count":57,"default_branch":"main","last_synced_at":"2025-05-07T06:38:32.735Z","etag":null,"topics":["bpf","docker","ebpf","golang","kubernetes","linux","runtime-security","security"],"latest_commit_sha":null,"homepage":"https://aquasecurity.github.io/tracee/latest","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aquasecurity.png","metadata":{"files":{"readme":"Readme.md","changelog":null,"contributing":"docs/contributing/building/building.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2019-09-18T13:20:17.000Z","updated_at":"2025-05-06T15:19:57.000Z","dependencies_parsed_at":"2023-10-03T02:15:19.813Z","dependency_job_id":"f3de5596-0ee1-4a03-94c0-1f38989a6883","html_url":"https://github.com/aquasecurity/tracee","commit_stats":{"total_commits":2076,"total_committers":78,"mean_commits":"26.615384615384617","dds":0.7967244701348748,"last_synced_commit":"2de14ea130db3e76b031218e273187978a4b6eb1"},"previous_names":[],"tags_count":86,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aquasecurity%2Ftracee","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aquasecurity%2Ftracee/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aquasecurity%2Ftracee/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aquasecurity%2Ftracee/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aquasecurity","download_url":"https://codeload.github.com/aquasecurity/tracee/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254092648,"owners_count":22013290,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bpf","docker","ebpf","golang","kubernetes","linux","runtime-security","security"],"created_at":"2024-07-30T21:00:22.821Z","updated_at":"2025-05-14T07:07:37.327Z","avatar_url":"https://github.com/aquasecurity.png","language":"Go","readme":"![Tracee Logo](docs/images/tracee.png)\n\n\u003c!-- links that differ between docs and readme --\u003e\n[installation]:https://aquasecurity.github.io/tracee/latest/docs/install/\n[docker-guide]:https://aquasecurity.github.io/tracee/latest/docs/install/docker/\n[kubernetes-guide]:https://aquasecurity.github.io/tracee/latest/docs/install/kubernetes/\n[prereqs]:https://aquasecurity.github.io/tracee/latest/docs/install/prerequisites/\n[macfaq]:https://aquasecurity.github.io/tracee/latest/docs/advanced/mac/\n\nBefore moving on, please consider giving us a GitHub star ⭐️. Thank you!\n\n## About Tracee\n\nTracee is a runtime security and observability tool that helps you understand how your system and applications behave.  \nIt is using [eBPF technology](https://ebpf.io/what-is-ebpf/) to tap into your system and expose that information as events that you can consume.  \nEvents range from factual system activity events to sophisticated security events that detect suspicious behavioral patterns.\n\nTo learn more about Tracee, check out the [documentation](https://aquasecurity.github.io/tracee/).\n\n## Quickstart\n\nTo quickly try Tracee use one of the following snippets. For a more complete installation guide, check out the [Installation section][installation].  \nTracee should run on most common Linux distributions and kernels. For compatibility information see the [Prerequisites][prereqs] page.  Mac users, please read [this FAQ][macfaq].\n\n### Using Docker\n\n```shell\ndocker run --name tracee -it --rm \\\n  --pid=host --cgroupns=host --privileged \\\n  -v /etc/os-release:/etc/os-release-host:ro \\\n  -v /var/run:/var/run:ro \\\n  aquasec/tracee:latest\n```\n\nFor a complete walkthrough please see the [Docker getting started guide][docker-guide].\n\n### On Kubernetes\n\n```shell\nhelm repo add aqua https://aquasecurity.github.io/helm-charts/\nhelm repo update\nhelm install tracee aqua/tracee --namespace tracee --create-namespace\n```\n\n```shell\nkubectl logs --follow --namespace tracee daemonset/tracee\n```\n\nFor a complete walkthrough please see the [Kubernetes getting started guide][kubernetes-guide].\n\n## Contributing\n  \nJoin the community, and talk to us about any matter in the [GitHub Discussions](https://github.com/aquasecurity/tracee/discussions) or [Slack](https://slack.aquasec.com).  \nIf you run into any trouble using Tracee or you would like to give use user feedback, please [create an issue.](https://github.com/aquasecurity/tracee/issues)\n\nFind more information on [contribution documentation](https://aquasecurity.github.io/tracee/latest/contributing/overview/).\n\n## More about Aqua Security\n\nTracee is an [Aqua Security](https://aquasec.com) open source project.  \nLearn about our open source work and portfolio [here](https://www.aquasec.com/products/open-source-projects/).\n","funding_links":[],"categories":["Official resources Tracee","Projects Related to eBPF","Forensics Tools","C","Go","Dependency intelligence","Kubernetes","Security","Tools","Container \u0026 Kubernetes Security","golang","Go (531)","Other Lists","security","eBPF 相关项目","Container and Kubernetes Security","Container Security"],"sub_categories":["Security","Kubernetes runtime security","Kubernetes Security","Detection","Runtime Security","🧪 LAB","安全"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Faquasecurity%2Ftracee","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Faquasecurity%2Ftracee","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Faquasecurity%2Ftracee/lists"}