Currently fact is only able to notify the container ID of a given process, there would be some value to gain if we were to make it possible for fact to add more information about the container said process is running on. The current protobuf definitions for the gRPC output don't include fields for this type of information, since stackrox delegates this task to sensor, but it would be trivial to add these fields to the stdout and the (hopefully soon to be merged) otel output by extending the existing event::Process type. Eventually, if we wanted to add this information to the stackrox protobuf definitions, it would allow for fact to be run in contexts were stackrox doesn't usually have the ability to gather container information (i.e: fact could be run inside a VM and report back container information as part of its stream).
Currently fact is only able to notify the container ID of a given process, there would be some value to gain if we were to make it possible for fact to add more information about the container said process is running on. The current protobuf definitions for the gRPC output don't include fields for this type of information, since stackrox delegates this task to sensor, but it would be trivial to add these fields to the stdout and the (hopefully soon to be merged) otel output by extending the existing
event::Processtype. Eventually, if we wanted to add this information to the stackrox protobuf definitions, it would allow for fact to be run in contexts were stackrox doesn't usually have the ability to gather container information (i.e: fact could be run inside a VM and report back container information as part of its stream).