derailed/popeye

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

6346 stars · 347 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Popeye is a read-only CLI tool that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. It detects misconfigurations, stale resources, and security risks, and can export reports as JSON, HTML, or Prometheus metrics.

Use cases

• audit a kubernetes cluster for misconfigurations
• find stale and unused k8s resources
• check cluster security best practices like default service accounts
• detect containers missing liveness and readiness probes
• report pod resource over/under allocation using metrics-server
• generate cluster health reports in json or html
• lint a live kubernetes cluster from the terminal

When to choose

• you want a read-only linter that scans what is actually deployed in a live cluster
• you need actionable severity-coded findings for pods, containers, and security settings
• you want Prometheus metrics and a Grafana dashboard for cluster sanitation scores

When to avoid

• you need static analysis of manifests on disk rather than a live cluster
• you want a tool that automatically fixes or mutates cluster resources
• you need policy enforcement/admission control rather than linting

Facets

cli-tool · maturity active

monitoring security linter developer-tools cli monitoring security cloud-computing infrastructure-as-code windows cli go kubernetes cluster-linter sanitizer misconfiguration-detection prometheus-metrics read-only best-practices k8s-audit devops containers linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="derailed/popeye")