macOS
brew install kube-linterlocal Homebrew formula metadata
sudo port install kube-linterMacPorts ports tree · devel/kube-linter/Portfile · ソース: api.github.com
brew
kube-linter のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。
インストール
brew install kube-linterlocal Homebrew formula metadata
sudo port install kube-linterMacPorts ports tree · devel/kube-linter/Portfile · ソース: api.github.com
nix profile install nixpkgs#kube-linternixpkgs package indexes · pkgs/by-name/ku/kube-linter/package.nix · ソース: api.github.com
sudo pacman -S kube-linterArch Linux sync databases · kube-linter · ソース: geo.mirror.pkgbuild.com
sudo zypper install kube-linteropenSUSE Tumbleweed package metadata · kube-linter · ソース: download.opensuse.org
scoop install main/kube-linterScoop official bucket manifest trees · bucket/kube-linter.json · ソース: api.github.com
概要
Static analysis tool for Kubernetes YAML files and Helm charts
履歴
KubeLinter is StackRox's static-analysis CLI for Kubernetes manifests, Helm charts, and Kustomize output. It checks workload definitions before deployment and reports production-readiness and security recommendations such as non-root execution, least privilege, resource settings, and secret handling.
The public GitHub repository was created on 2020-08-13, and the first GitHub release, 0.0.1, was published on 2020-09-17. StackRox announced KubeLinter publicly on 2020-10-28 as an open source tool for finding Kubernetes misconfigurations before workloads reach a cluster.
The project later became part of the StackRox/Red Hat Kubernetes security toolchain identity: its README says KubeLinter was created by StackRox and is powered by Red Hat. The codebase stayed focused on one job: linting Kubernetes YAML-family inputs with configurable checks and machine-readable output formats.
KubeLinter's adoption path followed the normal Kubernetes CLI pattern: standalone release binaries, Homebrew packaging, Go installation, Docker images, and CI integration. The companion stackrox/kube-linter-action repository packages the same scanner as a GitHub Action for pull-request and workflow checks.
Users run KubeLinter locally or in CI against rendered manifests, Helm charts, or Kustomize output. A failed check returns a non-zero exit code, which makes the tool useful as a lightweight guardrail before kubectl apply, Helm install, or a GitOps reconciler sees the manifests.
The config file convention in this batch, .kube-linter.yaml, matches the tool's configurable-policy role: teams can enable, disable, or define checks around their own Kubernetes baseline instead of accepting a single universal rule set.
For package people, KubeLinter is a good example of the security-shift-left wave becoming a small installable CLI. It sits next to kubectl, helm, kustomize, and CI actions rather than requiring a hosted service, which is why Homebrew and other package-manager delivery matter.
Its significance is less about replacing cluster admission policy and more about catching obvious manifest mistakes while the artifact is still text in a repository.
セキュリティ状態
infrastructure mutation or orchestration signal.
リスク orange · 信頼度 中 · infrastructure
エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
.kube-linter.yaml実行可能ファイル
| コマンド | 種類 | 公開範囲 | メモ |
|---|---|---|---|
kube-linter | cli | グローバル実行可能ファイル |
鮮度
これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。
https://github.com/stackrox/kube-linter
インストールメタデータ
| パッケージキー | brew:kube-linter |
|---|---|
| バージョン | 0.8.3 |
| パッケージマネージャ | Homebrew |
| パッケージマネージャページ | https://formulae.brew.sh/formula/kube-linter |
| ホームページ | https://docs.kubelinter.io/ |
| リポジトリ | https://github.com/stackrox/kube-linter |
| 上流ドキュメント | https://docs.kubelinter.io/ |
| ライセンス | Apache-2.0 |
| ソースアーカイブ | https://github.com/stackrox/kube-linter/archive/refs/tags/v0.8.3.tar.gz |
| 最終更新 | 2026-06-15T10:20:19-04:00 |
| Pulse | updated |
| ビルド依存関係 | go |
| Bottle | 利用可能 (対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | 未定義 |
| サービス | 宣言なし |
レジストリ情報
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | kube-linter |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
ソースデータベース一致
一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。
kube-linter
nix profile install nixpkgs#kube-linterkube-linter 0.8.3-1
Static analysis tool that checks Kubernetes YAML files and Helm charts
https://github.com/stackrox/kube-linter
sudo pacman -S kube-linterkube-linter 0.8.3-1.2
Static analysis tool that checks Kubernetes YAML files and Helm charts
https://github.com/stackrox/kube-linter
sudo zypper install kube-linterkube-linter-bash-completion 0.8.3-1.2
Bash Completion for kube-linter
https://github.com/stackrox/kube-linter
sudo zypper install kube-linter-bash-completionkube-linter-fish-completion 0.8.3-1.2
Fish Completion for kube-linter
https://github.com/stackrox/kube-linter
sudo zypper install kube-linter-fish-completionkube-linter-zsh-completion 0.8.3-1.2
Zsh Completion for kube-linter
https://github.com/stackrox/kube-linter
sudo zypper install kube-linter-zsh-completionkube-linter
sudo port install kube-lintermain/kube-linter
scoop install main/kube-linterソース経路
このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。
View the package source record on GitHub.