{"adoption": {"forks": 1335, "observed_at": "2026-08-28T04:10:13.903059+00:00", "stars": 8155}, "canonical_url": "https://ross.abutalabs.com/products/kube-bench", "card": {"archived": false, "artifact_type": "cli-tool", "description": "Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark", "domain": ["security", "cloud-computing"], "enriched": true, "function": ["security", "vulnerability-scanning", "testing", "cli"], "health_score": 100, "homepage": null, "language": "Go", "license": "Apache-2.0", "license_family": "permissive", "maturity": "active", "member_repos": ["aquasecurity/kube-bench"], "name": "aquasecurity/kube-bench", "platform": ["go", "cli"], "pushed_at": "2026-08-24T19:32:49+00:00", "repo": "aquasecurity/kube-bench", "stars": 8155, "tags": ["cis-benchmark", "kubernetes-security", "security-audit", "compliance", "openshift", "containers", "devops", "kubernetes", "docker", "linux"], "topics": ["kube-bench", "cis-security", "kubernetes-security", "cis-benchmark", "cis-kubernetes-benchmark", "openshift", "kubernetes", "hacktoberfest"], "urls": [], "use_cases": ["audit a kubernetes cluster against cis security benchmarks", "check kubelet and control plane security configuration", "run cis compliance scans as a kubernetes job", "verify kubernetes hardening before production", "generate compliance reports for cluster security", "scan openshift deployments for cis benchmark compliance"], "what_it_is": "kube-bench is a Go-based tool that checks whether Kubernetes clusters are deployed securely by running the checks documented in the CIS Kubernetes Benchmark. Tests are configured with YAML files, and it can run as a Kubernetes Job, a container, or a binary on the host.", "when_to_avoid": ["you need broad vulnerability scanning beyond CIS benchmarks - use Trivy instead", "you want continuous in-cluster scanning with an operator - use Trivy Operator", "you are not running Kubernetes or OpenShift"], "when_to_choose": ["you need CIS Kubernetes Benchmark compliance checks for a cluster", "you want a lightweight, YAML-configurable security audit tool", "you need to run security checks as a scheduled Kubernetes Job"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/kube-bench", "repo": "aquasecurity/kube-bench", "role": "main", "score": 98}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:10:13.903059+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-29T17:29:45.819800+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2ad42da663f811e2b5e8c0f813fe99bd81c5a35237d78b38333082fec41436fb", "fetched_at": "2026-08-28T04:10:13.903059+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/kube-bench"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:10:13.903059+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-29T17:29:45.819800+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2ad42da663f811e2b5e8c0f813fe99bd81c5a35237d78b38333082fec41436fb", "fetched_at": "2026-08-28T04:10:13.903059+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/kube-bench"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-29T17:29:45.819800+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2ad42da663f811e2b5e8c0f813fe99bd81c5a35237d78b38333082fec41436fb", "fetched_at": "2026-08-28T04:10:13.903059+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/kube-bench"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:10:13.903059+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:10:13.903059+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:10:13.903059+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-29T17:29:45.819800+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2ad42da663f811e2b5e8c0f813fe99bd81c5a35237d78b38333082fec41436fb", "fetched_at": "2026-08-28T04:10:13.903059+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/kube-bench"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:10:13.903059+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:10:13.903059+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-29T17:29:45.819800+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2ad42da663f811e2b5e8c0f813fe99bd81c5a35237d78b38333082fec41436fb", "fetched_at": "2026-08-28T04:10:13.903059+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/kube-bench"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:10:13.903059+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:10:13.903059+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:10:13.903059+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-29T17:29:45.819800+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2ad42da663f811e2b5e8c0f813fe99bd81c5a35237d78b38333082fec41436fb", "fetched_at": "2026-08-28T04:10:13.903059+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/kube-bench"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:10:13.903059+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:10:13.903059+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-29T17:29:45.819800+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2ad42da663f811e2b5e8c0f813fe99bd81c5a35237d78b38333082fec41436fb", "fetched_at": "2026-08-28T04:10:13.903059+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/kube-bench"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-29T17:29:45.819800+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2ad42da663f811e2b5e8c0f813fe99bd81c5a35237d78b38333082fec41436fb", "fetched_at": "2026-08-28T04:10:13.903059+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/kube-bench"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-29T17:29:45.819800+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2ad42da663f811e2b5e8c0f813fe99bd81c5a35237d78b38333082fec41436fb", "fetched_at": "2026-08-28T04:10:13.903059+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/kube-bench"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-29T17:29:45.819800+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2ad42da663f811e2b5e8c0f813fe99bd81c5a35237d78b38333082fec41436fb", "fetched_at": "2026-08-28T04:10:13.903059+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aquasecurity/kube-bench"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 99, "longevity": 100, "rhythm": 96}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 3362, "days_push": 9, "days_rel": 28, "gap_med": 22, "n_releases_24m": 26}, "score": 98, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}