From f5be27185cd952ed6d22a263646559e6213d2bc7 Mon Sep 17 00:00:00 2001
From: Andrea Terzolo <andreaterzolo3@gmail.com>
Date: Thu, 15 Feb 2024 13:09:52 +0100
Subject: [PATCH] fix(ci): install plugins with falcoctl

Signed-off-by: Andrea Terzolo <andreaterzolo3@gmail.com>
---
 .github/workflows/ci.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index cd198e6..4e5f589 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -44,6 +44,12 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Install needed artifacts using falcoctl
+        run: |
+          mkdir -p /usr/share/falco/plugins
+          falcoctl artifact install k8saudit-rules
+          falcoctl artifact install cloudtrail-rules
+
       # note: this converts the output of go test into a junit-compatible,
       # which can later be processed by test-summary/action to upload
       # a Markdown report on the GitHub Actions workflow.