iac.kube-linterkube-linter
Runs kube-linter over plain Kubernetes manifests: privileged and root containers, host namespaces, missing resource limits and probes, mutable image tags, RBAC wildcards. Helm templates are skipped.
- Engine
- Wrapped scanner
- Wraps
kube-linter- Targets
- Infrastructure as code
- Areas
- Security, Reliability, Best practices
- Runs
- By default, when the target applies
- Network
- Only the target itself
Run only this auditor
bunx openaudit . --only iac.kube-linterWraps kube-linter. When it isn't installed, the auditor is skipped with an install hint and the rest of the audit runs.