iac.kubescapeKubescape
Runs Kubescape over plain Kubernetes manifests (NSA, MITRE and CIS style controls). Kubescape downloads its control library from GitHub on each run. The scan passes --keep-local, so results are never submitted to the Kubescape cloud backend, even when an account is configured on this machine.
- Engine
- Wrapped scanner
- Wraps
kubescape- Targets
- Infrastructure as code
- Areas
- Security, Reliability
- Runs
- Opt-in: only when selected with --only
- Network
- Contacts services beyond the target
Run only this auditor
bunx openaudit . --only iac.kubescapeWraps kubescape. When it isn't installed, the auditor is skipped with an install hint and the rest of the audit runs.