iac.kubernetesKubernetes manifests
Checks workloads for privileged/root containers, host namespaces, hostPath, missing limits and probes, mutable images, plaintext secrets, exposed Services and RBAC wildcards.
- Engine
- Built-in
- Targets
- Infrastructure as code
- Areas
- Security, Reliability, Supply chain
- Runs
- By default, when the target applies
- Network
- Only the target itself
Run only this auditor
bunx openaudit . --only iac.kubernetesBuilt into openaudit; nothing to install.