Skip to content
@kubescape

Kubescape

Kubernetes E2E open-source security for DevOps
README.md

logo

Hi there 👋

Welcome to the home of the Kubescape project and its community!

🙋‍♀️ A short introduction - Kubescape is about providing security for Kubernetes users, from dev to production!

🌈 Contribution guidelines - Want to join the community of contributors? You can contribute in many ways! Writing code, documentation or even opening a bug. All of these and more count! Check out our guidelines Check out the Kubescape repo to learn more about us!

👩‍💻 Useful resources - Start your journey here

🍿 Fun fact - Kubescape was spelled "Koob's Cape" until 1879 when John S. Fileby canonized the new spelling 🙃

Pinned Loading

  1. kubescape kubescape Public

    Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernet…

    Go 11.8k 1.1k

  2. helm-charts helm-charts Public

    Kubescape can run as a set of microservices inside a Kubernetes cluster. This allows you to continually monitor the status of a cluster, including for compliance and vulnerability management

    Python 42 93

  3. regolibrary regolibrary Public

    The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.

    Open Policy Agent 134 95

  4. project-governance project-governance Public

    Repository serving as the central project governance documentation directory for the Kubescape project

    Python 3

Repositories

Showing 10 of 66 repositories
  • kubescape Public

    Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

    kubescape/kubescape's past year of commit activity
    Go 11,845 Apache-2.0 1,087 28 (1 issue needs help) 12 Updated Nov 4, 2026
  • helm-charts Public

    Kubescape can run as a set of microservices inside a Kubernetes cluster. This allows you to continually monitor the status of a cluster, including for compliance and vulnerability management

    kubescape/helm-charts's past year of commit activity
    Python 42 Apache-2.0 93 6 8 Updated Nov 4, 2026
  • operator Public

    Operator is an in-cluster component of the Kubescape security platform. It allows clients to connect to itself, listens for commands from the connected clients and controls other in-cluster components according to received commands.

    kubescape/operator's past year of commit activity
    Go 25 Apache-2.0 42 5 4 Updated Nov 4, 2026
  • storage Public
    kubescape/storage's past year of commit activity
    Go 6 Apache-2.0 32 9 7 Updated Nov 4, 2026
  • kubevuln Public

    Kubevuln is an in-cluster component of the Kubescape security platform. It scans container images for vulnerabilities, using Grype as its engine.

    kubescape/kubevuln's past year of commit activity
    Go 26 Apache-2.0 57 4 12 Updated Nov 4, 2026
  • synchronizer Public
    kubescape/synchronizer's past year of commit activity
    Go 3 Apache-2.0 14 3 (2 issues need help) 3 Updated Nov 4, 2026
  • cel-admission-library Public

    This projects contains pre-made policies for Kubernetes Validating Admission Policies. This policy library is based on Kubescape controls, see here a comlete list https://hub.armosec.io/docs/controls

    kubescape/cel-admission-library's past year of commit activity
    Python 85 Apache-2.0 27 2 0 Updated Nov 4, 2026
  • node-agent Public

    Kubescape eBPF agent 🥷🏻

    kubescape/node-agent's past year of commit activity
    Go 39 Apache-2.0 38 10 9 Updated Nov 4, 2026
  • headlamp-plugin Public

    Plugin that integrates Kubescape's security and compliance features into the Headlamp dashboard

    kubescape/headlamp-plugin's past year of commit activity
    TypeScript 15 Apache-2.0 11 3 1 Updated Nov 4, 2026
  • inspektor-gadget Public Forked from inspektor-gadget/inspektor-gadget

    Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF

    kubescape/inspektor-gadget's past year of commit activity
    C 0 Apache-2.0 399 0 3 Updated Nov 3, 2026
View all repositories