Kubescape

kubescape

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

regolibrary

The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.

cel-admission-library

This projects contains pre-made policies for Kubernetes Validating Admission Policies. This policy library is based on Kubescape controls, see here a comlete list https://hub.armosec.io/docs/controls

helm-charts

Kubescape can run as a set of microservices inside a Kubernetes cluster. This allows you to continually monitor the status of a cluster, including for compliance and vulnerability management

kubevuln

Kubevuln is an in-cluster component of the Kubescape security platform. It scans container images for vulnerabilities, using Grype as its engine.

vscode-kubescape

Kubescape extension for Visual Studio Code

kapprofiler

Generate an application profile containing metrics/properties for Kubernetes workloads based on runtime behavior.

go-git-url

Package for parsing git url and executing git api calls

operator

Operator is an in-cluster component of the Kubescape security platform. It allows clients to connect to itself, listens for commands from the connected clients and controls other in-cluster components according to received commands.

opa-utils

Kubescape utils for opa scanning

node-agent

Kubescape eBPF agent 🥷🏻

k8s-interface

Kubescape wrapper for the Kubernetes interface

kollector

Kollector is an in-cluster component of the Kubescape security platform. It Communicates with the Kubernetes API server to collect cluster information and watches for changes in the cluster.

kubescape-network-scanner

Network scan and service discovery package

gateway

Gateway is an in-cluster component of the Kubescape security platform. It broadcasts a message received to its registered clients. When a client registers itself in a Gateway it must provide a set of attributes, which will serve as identification, for message routing purposes.

generate-vex-action

kwok-bench

A toolkit to efficiently create large-scale, simulated Kubernetes clusters for testing and benchmarking applications using KWOK.

prometheus-exporter

workflows

This repository is testing and building the Kubescape components images using GitHub workflows

kubescape.io

kubescape.io website

node-yamlparse

packaging

Packaging scripts that allow installation of Kubescape through various package manager.

storage

synchronizer

backend

backstage-plugin

http-request

The http-request package is meant to replace the curl command by a simple go script that runs an HTTP request

messaging

Kubescape's messaging package - a collection of wrapper code around Pulsar to quickly and easily connect to Pulsar brokers, send and receive messages, and message queues and topics management.

regolibrary-dev

workshops