# derailed/popeye

👀 A Kubernetes cluster resource sanitizer

Repository: https://github.com/derailed/popeye
Canonical: https://ross.abutalabs.com/products/popeye
Homepage: https://popeyecli.io
Language: Go
License: NOASSERTION
License Family: other
Topics: popeye, kubernetes-clusters, sanitizers, sanitize-resources, misconfigurations, kubernetes-resources, k8s, golang, go
Last push: 2025-12-08T14:11:50+00:00

## Health v2 (maintenance only)
Score: 59/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 56, release rhythm 40, longevity 100
- inputs: {"age_days": 2725, "days_push": 268, "days_rel": 582, "gap_med": 13.5, "n_releases_24m": 5}
- flags: no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 6346, forks 347 (observed 2026-08-28T04:09:42.700162+00:00)

## What it is
Popeye is a read-only CLI tool that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. It detects misconfigurations, stale resources, and security risks, and can export reports as JSON, HTML, or Prometheus metrics.

## Use cases
- audit a kubernetes cluster for misconfigurations
- find stale and unused k8s resources
- check cluster security best practices like default service accounts
- detect containers missing liveness and readiness probes
- report pod resource over/under allocation using metrics-server
- generate cluster health reports in json or html
- lint a live kubernetes cluster from the terminal

## When to choose
- you want a read-only linter that scans what is actually deployed in a live cluster
- you need actionable severity-coded findings for pods, containers, and security settings
- you want Prometheus metrics and a Grafana dashboard for cluster sanitation scores

## When to avoid
- you need static analysis of manifests on disk rather than a live cluster
- you want a tool that automatically fixes or mutates cluster resources
- you need policy enforcement/admission control rather than linting

## Facets
- artifact type: cli-tool
- maturity: active
- function: monitoring, security, linter, developer-tools, cli
- domain: monitoring, security, cloud-computing, infrastructure-as-code
- platform: windows, cli, go
- tags: kubernetes, cluster-linter, sanitizer, misconfiguration-detection, prometheus-metrics, read-only, best-practices, k8s-audit, devops, containers, linux, macos, docker

## Member repositories
- derailed/popeye (main) score 59

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:09:42.700162+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:46:07.771856+00:00, confidence not recorded.
  - readme: https://github.com/derailed/popeye (fetched 2026-08-28T04:09:42.700162+00:00, sha ea9ce048b9bf)
  - homepage: https://popeyecli.io (fetched 2026-08-29T08:42:24.030915+00:00, sha 74ba60db99ea)
  - site_page: https://popeyecli.io/docs/codes.html (fetched 2026-08-29T08:42:24.040372+00:00, sha b045d9cc3910)
- Data as of 2026-08-30T08:39:29.467469+00:00.