Falco Helm Charts is a collection of Helm charts for deploying Falco and related tools in Kubernetes environments.
The project addresses the need to package and distribute Falco, a runtime security tool, alongside complementary components like Falcosidekick, Falco Operator, and Falco Talon in a standardized way for Kubernetes deployments. It maintains source charts that are packaged, versioned, and published to both a traditional Helm repository and as OCI images in GitHub Packages, with CI processes managing the release pipeline.
Teams running Falco on Kubernetes should use these charts rather than managing deployments manually. The repository provides six distinct charts covering the core Falco agent, the operator for managing Falco instances, event generation for testing, Kubernetes metadata collection, response automation through Falco Talon, and the Falcosidekick alert router. Each chart includes its own documentation and configuration options. The charts are organized as separate directories within the repository, each containing a Chart.yaml file, making it straightforward to locate and customize individual components.
The project maintains an active contribution process with documented rules for chart contributions and a responsive issue-tracking system. Development activity shows regular engagement with the community through GitHub issues and pull requests, with clear policies for synchronizing charts from upstream source repositories.