# Install kubeconform with Homebrew, apk, MacPorts, Nix, pacman, scoop, winget, zypper FAST Kubernetes manifests validator, with support for Custom Resources! Version 0.8.0 via Homebrew; verified 2026-06-04. ## Install ```sh sudo av install brew:kubeconform ``` ## Agent safety answer kubeconform validates Kubernetes manifests and may read deployment configuration. - **Credential access:** Reads manifest files that may include secret references or generated values. - **Remote mutation:** Validation is local and does not mutate clusters. - **Publish/artifact risk:** Can validate deployable artifacts before cluster application. - **Recommended control:** Gate only when scanning secret-bearing files or feeding apply pipelines. - **Agent-use guidance:** Allow local validation; require approval before passing output into deployment commands. Additional install commands: ### macOS - Homebrew (100%): ```sh brew install kubeconform ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install kubeconform ``` Evidence: MacPorts ports tree: sysutils/kubeconform/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add kubeconform ``` Evidence: Alpine Linux edge package indexes: kubeconform from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz - Nix (92%): ```sh nix profile install nixpkgs#kubeconform ``` Evidence: nixpkgs package indexes: pkgs/by-name/ku/kubeconform/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S kubeconform ``` Evidence: Arch Linux sync databases: kubeconform from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install kubeconform ``` Evidence: openSUSE Tumbleweed package metadata: kubeconform from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ### Windows - Scoop (92%): ```sh scoop install main/kubeconform ``` Evidence: Scoop official bucket manifest trees: bucket/kubeconform.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id YannHamon.kubeconform -e ``` Evidence: Windows Package Manager source index: YannHamon.kubeconform from https://cdn.winget.microsoft.com/cache/source.msix ## Package facts - **Package key:** brew:kubeconform - **Package manager:** Homebrew - **Package manager page:** - **Version:** 0.8.0 - **Source summary:** FAST Kubernetes manifests validator, with support for Custom Resources! - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-06-04T22:29:59Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - kubeconform (cli) - kubeconform (alias) ## Build dependencies - go ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 0.8.0 - Package-manager updated: 2026-06-04 - Local data: ok - Upstream repository: https://github.com/yannh/kubeconform - Upstream latest detected: v0.8.0 (current) ## Project history and usage Kubeconform is a Kubernetes manifest validator that grew out of the Kubeval lineage: its own documentation says it is inspired by, contains code from, and is designed to stay close to Kubeval while adding higher-throughput validation, configurable schema locations, CRD support, offline validation, and a schema registry fork for recent Kubernetes versions. ### Project history The GitHub repository was created on 2020-05-30. The public documentation feed dates the overview, installation, usage, CRD support, JSON Schema conversion, GitHub Action, and Go-module documentation pages to 2021-07-02, which matches the period when the project presented itself as a standalone replacement for common Kubeval workflows. Kubeconform kept the Unix-style single-binary validator shape that made Kubeval popular in CI, but its distinguishing evolution was schema flexibility: users can validate against Kubernetes versions, local or remote schema locations, and converted CRD schemas rather than only core Kubernetes resources. ### Adoption history Adoption has been strongest in CI/CD and GitOps-adjacent workflows where teams want to fail manifest changes before applying them to a cluster. The tool's package-manager footprint across Homebrew, Linux distributions, Windows package managers, and Nix reflects a cross-platform CLI audience rather than a cluster-installed controller audience. The repository metadata observed on 2026-07-01 showed more than 3000 GitHub stars, making it one of the better-known third-party Kubernetes manifest validators outside kubectl itself. ### How it is used Typical use is to pass files, directories, or stdin to `kubeconform`, optionally choosing output such as text, JSON, JUnit, or TAP and enabling summary output for CI logs. For custom resources, users point `-schema-location` at local or HTTP(S) JSON schemas, or convert CRDs to JSON Schema with the project-provided conversion tooling. The package matters in validation pipelines because it gives maintainers a fast, scriptable check for Kubernetes resource structure without needing live cluster access. ### Why package nerds care For package-manager users, Kubeconform is the kind of small Go CLI that fits neatly into `brew install`, CI images, pre-commit hooks, and reproducible Nix shells. Its significance is not a broad runtime platform but a sharp replacement-class tool for a once-common Kubernetes validation gap. ### Timeline - 2020-05-30: GitHub repository created. - 2021-07-02: Documentation pages published for overview, installation, usage, CRD support, JSON Schema conversion, GitHub Action usage, and Go-module usage. - 2024-07-30: Release v0.6.7 published. - 2025-05-12: Release v0.7.0 published. - 2026-06-04: Release v0.8.0 published. ### Related projects - Kubeval is the direct predecessor named by the Kubeconform documentation. The kubernetes-json-schema registry is part of the validation ecosystem because Kubeconform uses JSON schemas for Kubernetes resources and supports schema-location overrides for CRDs. ### Sources - - - - - - ## Security Notes infrastructure mutation or orchestration signal. - **Geiger risk:** orange / medium - infrastructure mutation or orchestration signal ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** kubeconform - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Nix - kubeconform: normalized package name match | nixpkgs package indexes: pkgs/by-name/ku/kubeconform/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - apk - kubeconform - 0.7.0-r8: normalized package name match | Alpine Linux edge package indexes: kubeconform from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | A FAST Kubernetes manifests validator, with support for Custom Resources! | https://github.com/yannh/kubeconform - pacman - kubeconform - 0.7.0-2: normalized package name match | Arch Linux sync databases: kubeconform from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | FAST Kubernetes manifests validator, with support for Custom Resources! | https://github.com/yannh/kubeconform - zypper - kubeconform - 0.8.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: kubeconform from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | A fast Kubernetes manifests validator, with support for custom resources | https://github.com/yannh/kubeconform/ - MacPorts - kubeconform: normalized package name match | MacPorts ports tree: sysutils/kubeconform/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - Scoop - main/kubeconform: normalized package name match | Scoop official bucket manifest trees: bucket/kubeconform.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget - YannHamon.kubeconform: normalized package name match | Windows Package Manager source index: YannHamon.kubeconform from https://cdn.winget.microsoft.com/cache/source.msix ## Related links - [Cloud CLI packages](https://www.automicvault.com/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew. - [chart-testing](https://www.automicvault.com/pkg/brew/chart-testing/) - Shares av.db curated category or tags: ci, cli, developer-tools, kubernetes. - [kubebuilder](https://www.automicvault.com/pkg/brew/kubebuilder/) - Shares av.db curated category or tags: cli, crd, developer-tools, kubernetes. - [chart-releaser](https://www.automicvault.com/pkg/brew/chart-releaser/) - Shares av.db curated category or tags: cli, developer-tools, kubernetes. - [check-jsonschema](https://www.automicvault.com/pkg/brew/check-jsonschema/) - Shares av.db curated category or tags: cli, developer-tools, json-schema, validation. - [cmctl](https://www.automicvault.com/pkg/brew/cmctl/) - Shares av.db curated category or tags: cli, developer-tools, kubernetes. - [cri-tools](https://www.automicvault.com/pkg/brew/cri-tools/) - Shares av.db curated category or tags: cli, developer-tools, kubernetes. - [kamel](https://www.automicvault.com/pkg/brew/kamel/) - Shares av.db curated category or tags: cli, developer-tools, kubernetes. - [kapp](https://www.automicvault.com/pkg/brew/kapp/) - Shares av.db curated category or tags: cli, developer-tools, kubernetes. ## Combined YAML source View the package source record on GitHub. [combined/kubeconform.yml](https://github.com/automic-vault/db/blob/main/combined/kubeconform.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph - curated agent safety answer