{"adoption": {"forks": 142, "observed_at": "2026-08-28T04:04:42.342263+00:00", "stars": 1431}, "canonical_url": "https://ross.abutalabs.com/products/kubiscan", "card": {"archived": false, "artifact_type": "cli-tool", "description": "A tool to scan Kubernetes cluster for risky permissions", "domain": ["security"], "enriched": true, "function": ["security", "authorization", "vulnerability-scanning"], "health_score": 35, "homepage": null, "language": "Python", "license": "GPL-3.0", "license_family": "copyleft", "maturity": "active", "member_repos": ["cyberark/KubiScan"], "name": "cyberark/KubiScan", "platform": ["cli", "python", "cross-platform"], "pushed_at": "2025-05-25T11:33:02+00:00", "repo": "cyberark/KubiScan", "stars": 1431, "tags": ["kubernetes-rbac", "cluster-security", "penetration-testing", "service-accounts", "risk-audit", "containers", "devops", "kubernetes", "docker"], "topics": ["kubernetes", "rbac", "authorization", "conjbot"], "urls": [], "use_cases": ["scan kubernetes cluster for risky rbac permissions", "find over-privileged service accounts in k8s", "audit rolebindings and clusterrolebindings for excessive access", "dump service account tokens from pods", "identify pods with access to secrets", "check which users can escalate privileges in a cluster"], "what_it_is": "KubiScan is a Python CLI tool that scans Kubernetes clusters for risky permissions in the RBAC authorization model. It identifies risky roles, bindings, subjects, and pods, and can dump tokens to help administrators reduce cluster attack surface.", "when_to_avoid": ["you need continuous runtime security monitoring rather than point-in-time scanning", "your cluster does not use RBAC authorization", "you need a GUI-based policy management tool"], "when_to_choose": ["you need to audit RBAC risk across a large Kubernetes cluster", "you want automated detection of privilege escalation paths in k8s", "you run EKS, AKS, or GKE and need RBAC visibility"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/kubiscan", "repo": "cyberark/KubiScan", "role": "main", "score": 33}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.342263+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T04:37:06.641451+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdaa31ea4db2c1aa05385f7d58849b5373fde3b977d71d4e1876ae02a5c1c11a", "fetched_at": "2026-08-28T04:04:42.342263+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyberark/KubiScan"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.342263+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T04:37:06.641451+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdaa31ea4db2c1aa05385f7d58849b5373fde3b977d71d4e1876ae02a5c1c11a", "fetched_at": "2026-08-28T04:04:42.342263+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyberark/KubiScan"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T04:37:06.641451+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdaa31ea4db2c1aa05385f7d58849b5373fde3b977d71d4e1876ae02a5c1c11a", "fetched_at": "2026-08-28T04:04:42.342263+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyberark/KubiScan"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.342263+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.342263+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.342263+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T04:37:06.641451+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdaa31ea4db2c1aa05385f7d58849b5373fde3b977d71d4e1876ae02a5c1c11a", "fetched_at": "2026-08-28T04:04:42.342263+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyberark/KubiScan"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.342263+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.342263+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T04:37:06.641451+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdaa31ea4db2c1aa05385f7d58849b5373fde3b977d71d4e1876ae02a5c1c11a", "fetched_at": "2026-08-28T04:04:42.342263+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyberark/KubiScan"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.342263+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.342263+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.342263+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T04:37:06.641451+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdaa31ea4db2c1aa05385f7d58849b5373fde3b977d71d4e1876ae02a5c1c11a", "fetched_at": "2026-08-28T04:04:42.342263+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyberark/KubiScan"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.342263+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.342263+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T04:37:06.641451+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdaa31ea4db2c1aa05385f7d58849b5373fde3b977d71d4e1876ae02a5c1c11a", "fetched_at": "2026-08-28T04:04:42.342263+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyberark/KubiScan"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T04:37:06.641451+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdaa31ea4db2c1aa05385f7d58849b5373fde3b977d71d4e1876ae02a5c1c11a", "fetched_at": "2026-08-28T04:04:42.342263+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyberark/KubiScan"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T04:37:06.641451+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdaa31ea4db2c1aa05385f7d58849b5373fde3b977d71d4e1876ae02a5c1c11a", "fetched_at": "2026-08-28T04:04:42.342263+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyberark/KubiScan"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T04:37:06.641451+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdaa31ea4db2c1aa05385f7d58849b5373fde3b977d71d4e1876ae02a5c1c11a", "fetched_at": "2026-08-28T04:04:42.342263+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyberark/KubiScan"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 23, "longevity": 100, "rhythm": 8}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 2865, "days_push": 465, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 33, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}