Kubescape

kubescape

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

regolibrary

The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.

cel-admission-library

This projects contains pre-made policies for Kubernetes Validating Admission Policies. This policy library is based on Kubescape controls, see here a comlete list https://hub.armosec.io/docs/controls

helm-charts

Kubescape can run as a set of microservices inside a Kubernetes cluster. This allows you to continually monitor the status of a cluster, including for compliance and vulnerability management

github-action

GitHub action to run Kubescape scans

kubevuln

Kubevuln is an in-cluster component of the Kubescape security platform. It scans container images for vulnerabilities, using Grype as its engine.

kapprofiler

Generate an application profile containing metrics/properties for Kubernetes workloads based on runtime behavior.

go-git-url

Package for parsing git url and executing git api calls

operator

Operator is an in-cluster component of the Kubescape security platform. It allows clients to connect to itself, listens for commands from the connected clients and controls other in-cluster components according to received commands.

opa-utils

Kubescape utils for opa scanning

k8s-interface

Kubescape wrapper for the Kubernetes interface

node-agent

kubescape-network-scanner

Network scan and service discovery package

kollector

Kollector is an in-cluster component of the Kubescape security platform. It Communicates with the Kubernetes API server to collect cluster information and watches for changes in the cluster.

prometheus-exporter

workflows

This repository is testing and building the Kubescape components images using GitHub workflows

docker-desktop-extension

Kubescape extension for Docker Desktop

gateway

Gateway is an in-cluster component of the Kubescape security platform. It broadcasts a message received to its registered clients. When a client registers itself in a Gateway it must provide a set of attributes, which will serve as identification, for message routing purposes.

homebrew-tap

Homebrew tap for Kubescape

kubescape.io

kubescape.io website

packaging

Packaging scripts that allow installation of Kubescape through various package manager.

storage

synchronizer

backend

http-request

The http-request package is meant to replace the curl command by a simple go script that runs an HTTP request

kubeclient

A python wrapper for the k8s api python client

messaging

Kubescape's messaging package - a collection of wrapper code around Pulsar to quickly and easily connect to Pulsar brokers, send and receive messages, and message queues and topics management.

node-kubescape

Shared features of vscode-kubescape and lens-kubescape

regolibrary-dev

tablewriter

ASCII table in golang