feat(k8saudit): file watching#1167

Open

RichardoC wants to merge 8 commits intofalcosecurity:mainfrom

RichardoC:feature/k8saudit-file-watching

Commits on Jan 22, 2026

feat(k8saudit): add file watching support via tail:// scheme

RichardoC
and
claude
committed
docs(k8saudit): document tail:// file watching scheme

RichardoC
and
claude
committed
docs(k8saudit): correct documentation for default file read
RichardoC
committed

Commits on Jan 26, 2026

Update plugins/k8saudit/pkg/k8saudit/tail/tail_test.go

RichardoC
and
irozzo-1A
authored
refactor(k8saudit): use event-driven file watching with fsnotify

RichardoC
and
claude
committed

Commits on Feb 5, 2026

Commits on Mar 10, 2026

fix(k8saudit): fix file watcher offset overshoot when last line lacks trailing newline
RichardoC
committed