kubescape

What you can do with it

• Scan a running Kubernetes cluster against NSA-CISA, MITRE ATT&CK and CIS benchmarks
• Check YAML files, Helm charts and container images for misconfigurations and known vulnerabilities before deploying
• Automatically fix misconfigurations in manifest files or patch vulnerable container images

Ways a business could use it

• Check Kubernetes deployments for security gaps before going live, avoiding the cost of a paid security audit tool
• Add automated security and compliance checks to a CI/CD pipeline to help meet client or regulatory requirements

Can you use it commercially?

Free to use, change and sell, including in paid products. Keep the copyright notice.

Not legal advice. Read the project's licence file before building a product on it.

Getting it running

Install with a one-line shell script, Homebrew, Krew, Chocolatey, Scoop or other package managers, then run "kubescape scan" against a cluster you have access to.

Follow the official instructions in the project README.

Things to check

• Useful mainly if you already run Kubernetes; it is not for general users
• The one-line install pipes a script from the internet into bash, so review it first
• Some features rely on third-party tools such as Grype, Copacetic and Inspektor Gadget
• Created by ARMO, which also sells a commercial platform, so some features may be geared towards it

Who's talking about it

• The Next New Thing: Explaining The Weeks Top 10 Repos YouTube