Shopify/kubeaudit

Health v2 · maintenance only

Flags: archived

Adoption not part of the score

1936 stars · 189 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

kubeaudit is a command line tool and Go package that audits Kubernetes clusters against common security controls like running as non-root, read-only root filesystems, and avoiding privileged containers. It can also be used as a kubectl plugin, but the project is deprecated as of October 2024.

Use cases

• audit kubernetes cluster security configuration
• check containers run as non-root
• find privileged containers in kubernetes
• verify pods drop dangerous capabilities
• enforce read-only root filesystem in deployments
• run security audits as kubectl plugin

When to choose

• you need to audit existing Kubernetes manifests or clusters for security misconfigurations
• you want a lightweight Go-based CLI or library for container security checks
• you are pinned to Kubernetes >=1.19 and accept the deprecation

When to avoid

• you need an actively maintained tool - kubeaudit is deprecated as of October 2024
• you want ongoing support or new features - consider Kubebench instead
• you need runtime security monitoring rather than configuration auditing

Facets

cli-tool · maturity abandoned

security vulnerability-scanning cli security developer-tools cli go cross-platform kubernetes-audit security-controls kubectl-plugin deprecated container-security containers devops kubernetes

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Shopify/kubeaudit")