OpenRung
A free, privacy-first relay network that helps you reach the open internet. Open source and nonprofit-run.
翻訳待ち
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes
翻訳待ち
セキュリティGo · Open Policy AgentGitHub @kubescape自分でインストール所有者未確認
Paste into Claude or ChatGPT for installation instructions suited to your environment.
Have you tried it? One tap is enough. No sign-in needed.
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
翻訳待ち
Loading the full README.
Read the full README ↗Comprehensive Kubernetes Security from Development to Runtime
Kubescape is an open-source Kubernetes security platform that provides comprehensive security coverage, from left to right across the entire development and deployment lifecycle. It offers hardening, posture management, and runtime security capabilities to ensure robust protection for Kubernetes environments.
Kubescape was created by ARMO and is a Cloud Native Computing Foundation (CNCF) incubating project.
Please star ⭐ the repo if you want us to continue developing and improving Kubescape!
| Feature | Description |
|---|---|
| 🔍 Misconfiguration Scanning | Scan clusters, YAML files, and Helm charts against NSA-CISA, MITRE ATT&CK®, and CIS Benchmarks |
| 🐳 Image Vulnerability Scanning | Detect CVEs in container images using Grype |
| 🩹 Image Patching | Automatically patch vulnerable images using Copacetic |
| 🔧 Auto-Remediation | Automatically fix misconfigurations in Kubernetes manifests |
| 🛡️ Admission Control | Enforce security policies with Validating Admission Policies (VAP) |
| 📊 Runtime Security | eBPF-based runtime monitoring via Inspektor Gadget |
| 🤖 AI Integration | MCP server for AI assistant integration |
curl -s https://raw.githubusercontent.com/kubescape/kubescape/master/install.sh | /bin/bash
💡 See Installation for more options (Homebrew, Krew, Windows, etc.)
# Scan your current cluster
kubescape scan
# Scan a specific YAML file or directory
kubescape scan /path/to/manifests/
# Scan a container image for vulnerabilities
kubescape scan image nginx:latest
Kubescape provides a detailed security posture overview including:
curl -s https://raw.githubusercontent.com/kubescape/kubescape/master/install.sh | /bin/bash
| Platform | Command |
|---|---|
| Homebrew | brew install kubescape |
| Krew | kubectl krew install kubescape |
| Arch Linux | yay -S kubescape |
| NixOS | nix-shell -p kubescape |
| Chocolatey | choco install kubescape |
| Scoop | scoop install kubescape |
iwr -useb https://raw.githubusercontent.com/kubescape/kubescape/master/install.ps1 | iex
Kubescape provides a comprehensive CLI with the following commands:
This is the beginning of the README. Read the rest at the original. Read the full README ↗