macOS
Homebrew已验证 · 100%
brew install kube-scorelocal Homebrew formula metadata
安装
其他安装命令
Linux
Nix已验证 · 92%
nix profile install nixpkgs#kube-scorenixpkgs package indexes · pkgs/by-name/ku/kube-score/package.nix · 来源: api.github.com
概览
软件包摘要
Kubernetes object analysis recommendations for improved reliability and security
历史
项目历史与用法
kube-score is a Kubernetes manifest analysis CLI that scores object definitions and recommends reliability and security improvements. It is aimed at the pre-deployment stage, where YAML, Helm output, or Kustomize output can still be changed cheaply.
项目历史
The kube-score repository was created on 2018-09-16, and its first beta release, v0.1.0-beta1, was published on 2018-09-26. The README presents it as static code analysis for Kubernetes object definitions, with checks for resources, network policy coverage, pod disruption budgets, probes, security contexts, and stable APIs.
Unlike cluster-side policy systems, kube-score kept a developer-tool shape: a single CLI that reads manifests, prints human or machine-readable findings, and exits with a CI-friendly status code.
采用历史
The project documents several distribution paths: GitHub release binaries for macOS, Linux, and Windows, a Docker image, Homebrew, and Krew as the kubectl score plugin. Its website also hosts an online demo backed by the kube-score/web repository, giving users a low-friction way to try the checks without installing the CLI.
使用方式
Typical usage pipes rendered Kubernetes resources into kube-score, for example from helm template or kustomize build. The tool can also read static YAML files or resources exported from a live cluster, then produce recommendations in human, JSON, CI, or SARIF-oriented formats.
Annotations such as kube-score/ignore and kube-score/enable let users suppress or opt into checks on individual objects, which keeps the linter usable in repositories where not every workload has the same operational constraints.
为什么软件包爱好者会关心
kube-score matters in package-manager culture because it is a small, composable quality gate for Kubernetes manifests. It turns a broad operational checklist into a command that can live in a Makefile, pre-commit hook, GitHub Action, or CI job.
It also illustrates a common Kubernetes packaging pattern: one Go binary, release artifacts for multiple platforms, a Docker image for containerized CI, Homebrew for local developer machines, and Krew for kubectl-plugin users.
时间线
- 2018-09-16: GitHub repository created.
- 2018-09-26: First GitHub release, v0.1.0-beta1, published.
- 2018-10-08: v0.1.0 published.
- 2025-04-28: GitHub release v1.20.0 published.
Related projects
- Helm and Kustomize are common input producers for kube-score.
- Krew distributes kube-score as a kubectl plugin named score.
- kube-score/web provides the browser demo linked from the README.
- KubeLinter occupies a related manifest-linting space with a stronger production-readiness and security-check branding.
来源
安全态势
风险级别：orange
infrastructure mutation or orchestration signal.
风险分类器
orange 风险 · 中 置信度 · infrastructure
原因
- infrastructure mutation or orchestration signal
信号
- text:kubernetes
安装行为
- formula 元数据中未记录 Homebrew post-install 钩子。
- Homebrew bottle 元数据适用于 8 个平台目标。
- 构建元数据列出 1 个构建依赖。
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
kube-score | cli | 全局可执行文件 |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-07-25
管理器版本1.20.0
管理器更新时间
本地数据OK
上游not checked
检测到的最新版本未检测到
https://github.com/zegl/kube-score
- 信息No package-manager update timestamp was available.低 置信度
- 信息No cached GitHub release or tag data was available.https://github.com/zegl/kube-scorenone 置信度
安装元数据
软件包元数据
| 软件包键 | brew:kube-score |
|---|---|
| 版本 | 1.20.0 |
| 软件包管理器 | Homebrew |
| 软件包管理器页面 | https://formulae.brew.sh/formula/kube-score |
| 主页 | https://kube-score.com |
| 仓库 | https://github.com/zegl/kube-score |
| 上游文档 | https://github.com/zegl/kube-score#readme |
| 许可证 | MIT |
| 源码归档 | https://github.com/zegl/kube-score.git |
| 构建依赖 | go |
| Bottle | 可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux) |
| Homebrew post-install | 未定义 |
| 服务 | 未声明 |
注册表事实
源数据库详情
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | kube-score |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
源数据库匹配
其他软件包管理器记录
匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。
Nix95%
kube-score
nix profile install nixpkgs#kube-score- normalized package name match
- 匹配方式：Kube Score
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
Combined YAML source
View the package source record on GitHub.
使用的来源
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment