KubeLinter

What KubeLinter is

KubeLinter is a free, open-source tool for statically checking Kubernetes YAML files, Helm charts and Kustomize manifests for production-readiness and security practices. Its default checks address issues such as running containers as non-root, limiting privileges and keeping sensitive information in secrets. Users can enable or disable checks and define their own to reflect organizational policies. When a check fails, KubeLinter provides remediation guidance and returns a non-zero exit code. It can produce multiple output formats in one run, including SARIF and JSON. Installation methods documented by the project include Go, release binaries, Homebrew or LinuxBrew, nix-shell and Docker. Container images are signed with cosign, with a public key provided for verification; the README cautions that keyless cosign signatures are not production ready. The project was created by StackRox and is now powered by Red Hat. It uses the Apache License 2.0, and users can seek community support through its Slack workspace. The README warns that command usage, flags and configuration formats may change.