sandeep27choudhary/KubeShield Security Scanner
Scan Kubernetes manifests for security misconfigurations with optional AI-powered attack simulation
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | File, directory, or "-" (stdin) to scan | no | . |
| fail-on | Minimum severity that fails CI: LOW|MEDIUM|HIGH|CRITICAL | no | HIGH |
| output | Output format: terminal|json|sarif | no | sarif |
| sarif-file | Filename for SARIF output (used when output=sarif) | no | kubeshield.sarif |
| no-llm | Skip LLM enrichment, run static rules only | no | true |
| provider | LLM provider: claude|openai|openrouter|ollama | no | "" |
| model | LLM model override | no | "" |
| namespace | Filter findings by Kubernetes namespace | no | "" |
Outputs
| name | description |
|---|---|
| sarif-file | Path to the generated SARIF report (when output=sarif) |
| exit-code | Scanner exit code: 0=clean, 1=warnings present, 2=CI blocked |