# Blog: Falco Weekly 50 - 2023

DevFeed: [Blog: Falco Weekly 50 - 2023](<https://devfeed.tech/articles/blog-falco-weekly-50-2023-32512.md>)

Original publisher: [Read original article](<https://falco.org/blog/falco-w-50-2023-weekly-recap/>)

Published: 2023-12-15T00:00:00Z

Content type: article

Language: en

Sources: [Falco - Falco](<https://devfeed.tech/sources/falco-falco.md>), [Falco - The Falco blog](<https://devfeed.tech/sources/falco-the-falco-blog.md>)

Topics: [Falco](<https://devfeed.tech/topics/falco.md>), [GitHub Actions](<https://devfeed.tech/topics/github-actions.md>), [ci](<https://devfeed.tech/topics/ci.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [Linux](<https://devfeed.tech/topics/linux.md>)

Tags: [blog](<https://devfeed.tech/tags/blog.md>), [ci](<https://devfeed.tech/tags/ci.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [container](<https://devfeed.tech/tags/container.md>), [falco](<https://devfeed.tech/tags/falco.md>), [github-actions](<https://devfeed.tech/tags/github-actions.md>), [linux](<https://devfeed.tech/tags/linux.md>)

## AI overview

A weekly recap of Falco development in late 2023, covering fixes and new features across Falco repositories. Highlights include expanded environment-variable handling in configuration, GitHub Actions CI migration, driver-loader work, container testing, and ongoing driver and library changes.

## Source excerpt

What happened in Falco this week? Let's go through the major changes that happened in various repositories under the falcosecurity organization. Libs The anticipated 0.14.0 libs tag (and its driver counterpart) are going to be tagged soon, by the end of next week. A xmas present for you all! :christmas_tree: Mostly fixes were merged during this week: Populate labels field for pod sandbox containers: https://github.com/falcosecurity/libs/pull/1564 Improved libscap modern bpf tests and CI checks: https://github.com/falcosecurity/libs/pull/1568 Avoid a double free when an exception is thrown during sinsp initialization: https://github.com/falcosecurity/libs/pull/1569 Made our pkg-config files paths-relative: https://github.com/falcosecurity/libs/pull/1570 Fixed some paths handling in fs.path: https://github.com/falcosecurity/libs/pull/1571 Do not include NULL terminator in enter event strings: https://github.com/falcosecurity/libs/pull/1574 Started a dedicated container engines test suite: https://github.com/falcosecurity/libs/pull/1544 Rewritten scary concatenate_paths function leveraging modern c++17 std::filesystem: https://github.com/falcosecurity/libs/pull/1533 Use a smart pointer for m_resolver in sinsp_dns_manager to avoid leaks: https://github.com/falcosecurity/libs/pull/1558 Also, thanks to actuated.dev for offering us arm64 github action runners, CI has been fully ported to github actions, except for a single CircleCI job! https://github.com/falcosecurity/libs/pull/1555 Rumors have it coming next: Drivers build fix against linux 6.7-rc4+: https://github.com/falcosecurity/libs/pull/1566 Add k8s.pod.uid, k8s.pod.sandbox_id and mark k8s.pod.id as legacy: https://github.com/falcosecurity/libs/pull/1575 Falco Falco has seen some big new features this week! Env variables expansion was extended to all scalar values in Falco configuration file! https://github.com/falcosecurity/falco/pull/2918, https://github.com/falcosecurity/falco/pull/2972 Leveraging the above, eng