Kubescape is an open‑source command line tool that audits Kubernetes clusters, manifest files, Helm charts, and container images for compliance and security issues. It runs on Linux, macOS, and Windows, and uses Grype to detect CVEs in images and eBPF via Inspektor Gadget for runtime monitoring. The CLI supports scanning a running cluster, local directories, or a single image, and can auto‑remediate misconfigurations in manifests.
If you need a lightweight, scriptable security check for Kubernetes, Kubescape is worth adding to your CI/CD pipeline. The main limitation is that it focuses solely on Kubernetes environments and requires cluster access or image pull privileges; it also has no native graphical interface.
more: https://github.com/kubescape/kubescape
my other side: ivo.blogspot.com
Leave a Reply