Download
kube-bench is a tool that checks whether Kubernetes is deployed securely by running the checks documented in the CIS Kubernetes Benchmark. Trivy, the all-in-one cloud-native security scanner, can be deployed as a Kubernetes Operator inside a cluster. Both, the Trivy CLI, and the Trivy Operator support CIS Kubernetes Benchmark scanning among several other features. There are multiple ways to run kube-bench. You can run kube-bench inside a pod, but it will need access to the host's PID namespace in order to check the running processes, as well as access to some directories on the host where config files and other files are stored.
Features
- The supplied job.yaml file can be applied to run the tests as a job
- Documentation available
- Examples available
- CIS Scanning as part of Trivy and the Trivy Operator
- Tests are configured with YAML files
- Checks whether Kubernetes is deployed securely by running the checks documented in the CIS Kubernetes Benchmark
Project Samples
Categories
DeploymentLicense
Apache License V2.0Follow kube-bench
Other Useful Business Software
Ship Agents Faster
Gemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of kube-bench!