- ./cmd/imgcollector/image/artifact.go is adapted from https://github.com/aquasecurity/trivy (Apache 2 Licence)
- ./pkg/ebpftracer parts are adapted from https://github.com/aquasecurity/tracee (Apache 2 Licence)
- ./pkg/cgroup some parts for stats are adapted from https://github.com/opencontainers/runc/blob/main/libcontainer/cgroups/stats.go (Apache 2 Licence)
- https://github.com/falcosecurity/libs/blob/74725244659e556ced587c2f0bec7bbd42d39b96/driver/bpf/fillers.h#L2395 is adapted to detect exec upper layer (Apache 2 Licence)