Updating audit rules for container platforms