kube-score

6.1easy start · #20 of 27
in Infrastructure Testing Tools

Runs on Linux, Mac, self-hosted, Web, Windows.

kube-score is ranked #20 of 27 in infrastructure testing tools on The Geeks Club. It runs on Linux, macOS, Self-hosted, Web, Windows.

Compared on infrastructure testing tools

Chef InSpec 0 of 4 in the starter kit Lesson 17.7 Conftest 0 of 4 in the starter kit Lesson 27.3 Test Kitchen 0 of 4 in the starter kit Lesson 37.2 kubeconform 0 of 4 in the starter kit Lesson 47.1 Terratest 0 of 4 in the starter kit Lesson 57.1 AWS CloudFormation 0 of 4 in the starter kit Lesson 66.9

Purpose: kube-score statically analyzes Kubernetes object definitions and recommends ways to improve application security and resilience.
Open source: The project is available under the MIT license.
Browser demo: The online demo accepts Kubernetes YAML or JSON, and the site states that it runs entirely in the browser without sending data to a server.
Install options: The project provides prebuilt binaries for macOS, Linux, and Windows, plus Docker, Homebrew, and Krew installation options.
Checks: Checks include container limits, NetworkPolicy targeting, PodDisruptionBudget, Pod anti-affinity, container probes, security context, and stable APIs.
CI use: kube-score can run in CI/CD and exits with code 1 for critical errors, with an option to use warnings as the exit threshold.
Integrations: The README demonstrates use with Helm, Kustomize, static YAML files, existing clusters, and Docker.
Output formats: Supported output formats are human-readable, JSON, CI, and SARIF; SARIF is described as supporting easier integration with CI platforms.
Configuration: Users can ignore tests globally or per object and enable optional tests globally or per object.
Analysis input: The README says results are best when input includes all applications deployed to the same namespace.
Build requirement: Building from source requires Go 1.21 or later.
Supported platforms: Prebuilt binaries are listed for macOS, Linux, and Windows.

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.