kube-bench
kube-bench copied to clipboard
Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 5 to 6. Release notes Sourced from docker/build-push-action's releases. v6.0.0 Export build record and generate build summary by @crazy-max in docker/build-push-action#1120 Bump @docker/actions-toolkit from 0.24.0 to 0.26.0...
- the latest default Kubernetes setup of AWS has its kubelet config path in the added location. Proposing to extend the list of scanned paths in order to make kube-bench...
**Overview** I just upgraded my AWS EKS cluster to Kubernetes 1.29 - afterwards kube-bench reports 3 new findings that haven't been reported in 1.28: ``` [FAIL] 3.2.1 Ensure that the...
**Overview** To help see and understand the issue I have written a perl script/tool that formats a test report (generated with json option) into html so that the detail can...
Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) from 0.29.3 to 0.30.2. Commits 37988e5 Merge remote-tracking branch 'origin/master' into release-1.30 c857a38 Update x/net for CVE-2023-45288 0407311 followup to allow special characters 25164f7 Merge pull request #123435...
Check kubect logs and the document of https://downloads.cisecurity.org/#/ CIS Kubernetes Benchmarks v1.9,you will not see module 5.6. I dont know what function is missing
**Overview** [A clear and concise description of what the bug is] **How did you run kube-bench?** kube-bench master **What happened?** error: kube-bench: /lib64/libc.so.6: version `GLIBC_2.32' not found (required by kube-bench)...
The EKS CIS benchmark 1.4.0 was released last year, yet only 1.2.0 is supported by kube-bench. Are there any plans to support newer versions like 1.3.0 and 1.4.0 soon? I...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 5 to 6. Release notes Sourced from golangci/golangci-lint-action's releases. v6.0.0 What's Changed This version removes annotations option (because it was useless), and removes the default output format...
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.29.3 to 0.31.2. Commits 270e5ab Update dependencies to v0.31.2 tag 5e3e8ea informers: add comment that Start does not block f71a5cc Call non-blocking informerFactory.Start synchronously to avoid races...