Skip to content

chore: add false positive for zabbix agent binaries#1526

Merged
egibs merged 3 commits into
chainguard-dev:mainfrom
narharim:zabbix-fp
May 22, 2026
Merged

chore: add false positive for zabbix agent binaries#1526
egibs merged 3 commits into
chainguard-dev:mainfrom
narharim:zabbix-fp

Conversation

@narharim
Copy link
Copy Markdown
Member

Summary

  • Add false positive rule for Zabbix agent system binaries

The Zabbix agent is open-source monitoring tool that triggers curl_easy, proc_s_cmdline, and proc_d_cmdline as false positives because:

  1. curl_easy_init — Used by web.page.regexp, web.page.get, and web.page.perf monitoring items to fetch HTTP URLs as part of web availability checks.
  2. /proc/%s/cmdline and /proc/%d/cmdline — Used by proc.num, proc.mem, and proc.cpu.util items to inspect running processes on the host being monitored.

Both behaviors are core monitoring functionality

References

@narharim
Copy link
Copy Markdown
Member Author

@egibs egibs enabled auto-merge (squash) May 22, 2026 19:08
@egibs egibs merged commit 2dbf4e5 into chainguard-dev:main May 22, 2026
17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants