# zegl/kube-score

Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static code analysis for Kubernetes.

Repository: https://github.com/zegl/kube-score
Canonical: https://ross.abutalabs.com/products/kube-score
Homepage: https://kube-score.com
Language: Go
License: MIT
License Family: permissive
Topics: kubernetes, linter, ci, go, helm, charts, static-code-analysis, kube-score, security, security-scanner, automation, kubernetes-monitoring, analysis, hacktoberfest, k8s, kubernetes-manifests, static-code-analyzer
Last push: 2026-05-20T13:20:26+00:00

## Health v2 (maintenance only)
Score: 60/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 83, release rhythm 8, longevity 100
- inputs: {"age_days": 2908, "days_push": 105, "days_rel": 492, "gap_med": 209, "n_releases_24m": 2}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3102, forks 200 (observed 2026-08-28T04:07:43.625680+00:00)

## What it is
kube-score is a static code analysis tool for Kubernetes object definitions that scores manifests and Helm charts against reliability and security best practices. It outputs actionable recommendations such as setting container limits, configuring probes, and avoiding running as root, and integrates easily into CI pipelines.

## Use cases
- lint kubernetes yaml manifests for best practices
- check helm charts for reliability and security issues before deploy
- prevent downtime caused by misconfigured deployments and statefulsets
- run kubernetes manifest analysis in ci pipeline
- verify pods have resource limits probes and poddisruptionbudgets
- detect containers running as root or with privileged security context

## When to choose
- you want automated static analysis of kubernetes yaml or helm charts in CI
- you need recommendations for improving reliability and security of manifests
- you want a fast go binary or docker image with no cluster access required

## When to avoid
- you need runtime security scanning of a live cluster rather than static analysis
- you need policy enforcement with admission control rather than linting

## Facets
- artifact type: cli-tool
- maturity: active
- function: linter, security, developer-tools, ci-cd
- domain: security, infrastructure-as-code
- platform: cli, windows
- tags: kubernetes-manifests, helm-charts, static-analysis, reliability, pod-security, kubernetes, devops, containers, linux, macos, docker

## Member repositories
- zegl/kube-score (main) score 60

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:43.625680+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:26:59.018488+00:00, confidence not recorded.
  - readme: https://github.com/zegl/kube-score (fetched 2026-08-28T04:07:43.625680+00:00, sha 85f0d14f5766)
  - homepage: https://kube-score.com (fetched 2026-08-29T09:42:06.402155+00:00, sha b8299d29c190)
- Data as of 2026-08-30T08:39:29.467469+00:00.