Skip to content

kubeaudit

Kubeaudit helps you audit your Kubernetes clusters against common security controls

Kubeaudit is a command line tool and a Go package to audit Kubernetes clusters for various different security concerns

secops

https://github.com/Shopify/kubeaudit

amd64 arm64

Installation

1. Add WakeMeOps repository

curl -sSL https://raw.githubusercontent.com/upciti/wakemeops/main/assets/install_repository | sudo bash

2. Install kubeaudit

sudo apt install kubeaudit

Snippets

FROM wakemeops/minideb:bullseye

RUN install_packages \
    kubeaudit=0.21.0*

USER 1001

- name: Install dependencies
  uses: upciti/wakemeops-action@v1
  with:
    packages: |
      kubeaudit=0.21.0*

Download URLs

Version SHA256 Size (KB)
0.21.0 4c2aa5624fc729a1ab946a163152b379026b8f46f2f40129370953eb03492669 6415
0.20.0 eddf8d866e77fd852755216f4d8cd550ce8dc6286479c85644909cc6e2da24a3 6416
0.19.0 5179785a648ac59cb64c9f21a677caaf46bebd28bd16408c6c25b91806ea8264 6365
Version SHA256 Size (KB)
0.21.0 f4a5f255dde867efbf601a965021e4ea22cc29fa88c56d97538a717e8fd2e8eb 5421
0.20.0 c350ca0ecd3c7a8d59c092c9137b99cb29b14610ce59db66a3d803a68b1c9554 5420
0.19.0 843e899e7192dec569473347438be7aefeaa0e47407c4c283d16d4222f6e9716 5374

Blueprints

Debian packages listed on this page are generated from op2deb YAML blueprints. Blueprints for kubeaudit are versionned here.

Click here to see kubeaudit ops2deb blueprints
https://github.com/upciti/wakemeops/blob/main/blueprints/secops/kubeaudit/ops2deb.yml
name: kubeaudit
matrix:
  versions:
    - 0.19.0
    - 0.20.0
    - 0.21.0
  architectures:
    - amd64
    - arm64
homepage: https://github.com/Shopify/kubeaudit
summary: kubeaudit helps you audit your Kubernetes clusters against common security
  controls
description: |-
  Kubeaudit is a command line tool and a Go package to audit Kubernetes clusters
  for various different security concerns
fetch: https://github.com/Shopify/kubeaudit/releases/download/v{{version}}/kubeaudit_{{version}}_linux_{{target}}.tar.gz
install:
  - kubeaudit:/usr/bin/

The blueprint fetch keyword contains a URL template pointing to kubeaudit releases. Downloaded files are locked in a lockfile versionned here.

Click here to see kubeaudit release hashes
https://github.com/upciti/wakemeops/blob/main/blueprints/secops/kubeaudit/ops2deb.lock.yml
- url: https://github.com/Shopify/kubeaudit/releases/download/v0.19.0/kubeaudit_0.19.0_linux_amd64.tar.gz
  sha256: da42b6b62dd50cba67b4a7dd5400c87f869a18bf92a52b470611ffd8061c5f56
  timestamp: 2022-08-05 16:23:33+00:00
- url: https://github.com/Shopify/kubeaudit/releases/download/v0.19.0/kubeaudit_0.19.0_linux_arm64.tar.gz
  sha256: 1a5361df827235fc8f4d49678b483acd640a22b49e5b8ea3e9332dd877e01fb9
  timestamp: 2022-08-05 16:23:33+00:00
- url: https://github.com/Shopify/kubeaudit/releases/download/v0.20.0/kubeaudit_0.20.0_linux_amd64.tar.gz
  sha256: 040492e8b44322d2f775186c3fd086ec5a15b967bb88a17e818b4dbc9c97f4f5
  timestamp: 2022-09-07 04:36:24+00:00
- url: https://github.com/Shopify/kubeaudit/releases/download/v0.20.0/kubeaudit_0.20.0_linux_arm64.tar.gz
  sha256: 79530cf2d73ec68bc5390084147685141b1915eeb5db7078ffcde1841743341c
  timestamp: 2022-09-07 04:36:24+00:00
- url: https://github.com/Shopify/kubeaudit/releases/download/v0.21.0/kubeaudit_0.21.0_linux_amd64.tar.gz
  sha256: 4b7222adf273f8c7cb37d0207ca54143a571e953613a5bfb7e3f7d1988d23d00
  timestamp: 2022-11-15 02:57:30+00:00
- url: https://github.com/Shopify/kubeaudit/releases/download/v0.21.0/kubeaudit_0.21.0_linux_arm64.tar.gz
  sha256: e1c8dcadb55532cbe057a239069873e194377365575f0de705af00f03bac9abd
  timestamp: 2022-11-15 02:57:30+00:00

Badge

WakeMeOps

[![WakeMeOps](https://docs.wakemeops.com/badges/kubeaudit.svg)](https://docs.wakemeops.com/packages/kubeaudit)

<a href="https://docs.wakemeops.com/packages/kubeaudit">
  <img src="https://docs.wakemeops.com/badges/kubeaudit.svg"/>
</a>

.. image:: https://docs.wakemeops.com/badges/kubeaudit.svg
:target: https://docs.wakemeops.com/packages/kubeaudit