controlplaneio/kubesec

Health v2 · maintenance only

Adoption not part of the score

1477 stars · 108 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Kubesec is a static analysis tool that performs security risk analysis on Kubernetes resource manifests, assigning a security score and detailed findings. It is available as a CLI, Docker image, HTTP server, kubectl plugin, and admission controller.

Use cases

• scan kubernetes yaml manifests for security misconfigurations
• score pod security context before deploying to cluster
• enforce security policies with a kubernetes admission webhook
• integrate kubernetes security scanning into CI pipeline
• check if containers run with read-only root filesystem

When to choose

• you want fast static analysis of Kubernetes YAML without a running cluster
• you need a simple security score for manifests in CI/CD
• you want to block insecure resources via an admission controller

When to avoid

• you need runtime security monitoring of live clusters
• you need full policy-as-code frameworks like OPA/Gatekeeper with custom policies
• you scan container images rather than Kubernetes manifests

Facets

cli-tool · maturity active

security vulnerability-scanning static-site-generator security windows cli go kubernetes sast static-analysis kubernetes-manifests admission-controller security-scoring devops containers linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="controlplaneio/kubesec")