stackrox/kube-linter

Health v2 · maintenance only

Adoption not part of the score

3501 stars · 274 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

KubeLinter is a static analysis CLI tool that checks Kubernetes YAML files, Helm charts, and Kustomize manifests against security and production-readiness best practices. It runs configurable default and custom checks, reports actionable recommendations, and returns a non-zero exit code on failures for CI integration.

Use cases

• lint kubernetes yaml manifests for security misconfigurations
• check helm charts against best practices before deployment
• enforce running containers as non-root user in k8s manifests
• add kubernetes manifest linting to a ci/cd pipeline
• create custom lint checks for organizational policies
• validate kustomize manifests for production readiness

When to choose

• you want early detection of kubernetes security misconfigurations in CI
• you need configurable or custom checks for k8s yaml, helm, and kustomize
• you prefer a fast, standalone Go binary with sensible defaults

When to avoid

• you need runtime cluster policy enforcement rather than static analysis
• you want full schema validation of Kubernetes resources against API versions
• you need a policy engine with admission controller integration like OPA/Gatekeeper

Facets

cli-tool · maturity active

linter static-site-generator security configuration-management ci-cd developer-tools security developer-tools infrastructure-as-code cli windows go kubernetes helm-charts kustomize yaml-linting static-analysis production-readiness custom-checks devops containers linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="stackrox/kube-linter")