Credential access
Reads manifest files that may include secret references or generated values.
agent safety
Agent safety answer
kubeconform validates Kubernetes manifests and may read deployment configuration.
Remote mutation
Validation is local and does not mutate clusters.
Publish/artifact risk
Can validate deployable artifacts before cluster application.
Recommended control
Gate only when scanning secret-bearing files or feeding apply pipelines.
Agent-use guidance
Allow local validation; require approval before passing output into deployment commands.
安装
使用 Automic Vault 安装
Automic Vault
sudo av install brew:kubeconformmacOS
Homebrewverified · 100%
brew install kubeconformlocal Homebrew formula metadata
MacPortsverified · 94%
sudo port install kubeconformMacPorts ports tree · sysutils/kubeconform/Portfile · source: api.github.com
Linux
Alpine Linux apkverified · 92%
sudo apk add kubeconformAlpine Linux edge package indexes · kubeconform · source: dl-cdn.alpinelinux.org
Nixverified · 92%
nix profile install nixpkgs#kubeconformnixpkgs package indexes · pkgs/by-name/ku/kubeconform/package.nix · source: api.github.com
Arch Linux pacmanverified · 92%
sudo pacman -S kubeconformArch Linux sync databases · kubeconform · source: geo.mirror.pkgbuild.com
openSUSE zypperverified · 92%
sudo zypper install kubeconformopenSUSE Tumbleweed package metadata · kubeconform · source: download.opensuse.org
Windows
Scoopverified · 92%
scoop install main/kubeconformScoop official bucket manifest trees · bucket/kubeconform.json · source: api.github.com
Windows Package Managerverified · 92%
winget install --id YannHamon.kubeconform -eWindows Package Manager source index · YannHamon.kubeconform · source: cdn.winget.microsoft.com
软件包管理器来源
平台说明
- 没有特定于此软件包的平台说明。
概览
软件包摘要
FAST Kubernetes manifests validator, with support for Custom Resources!
主页
命令和别名
- kubeconform
安全态势
风险级别：orange
infrastructure mutation or orchestration signal.
Risk classifier
orange risk · medium confidence · infrastructure
Why
- infrastructure mutation or orchestration signal
Signals
- text:kubernetes
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 6 platform targets.
- Build metadata lists 1 build dependencies.
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
kubeconform | cli | global executable |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-06-10
管理器版本0.8.0
管理器更新时间2026-06-04
本地数据ok
上游current
检测到的最新版本v0.8.0
https://github.com/yannh/kubeconform
- okNo freshness warnings were generated.
安装元数据
软件包元数据
| Package key | brew:kubeconform |
|---|---|
| Version | 0.8.0 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/kubeconform |
| Homepage | https://github.com/yannh/kubeconform |
| Repository | https://github.com/yannh/kubeconform |
| Upstream docs | https://github.com/yannh/kubeconform#readme |
| License | Apache-2.0 |
| Source archive | https://github.com/yannh/kubeconform/archive/refs/tags/v0.8.0.tar.gz |
| Last updated | 2026-06-04T22:29:59Z |
| Pulse | updated |
| Build dependencies | go |
| Bottle | available (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | kubeconform |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Nix95%
kubeconform
nix profile install nixpkgs#kubeconform- normalized package name match
- Matched by: Kubeconform
apk95%
kubeconform 0.7.0-r8
A FAST Kubernetes manifests validator, with support for Custom Resources!
https://github.com/yannh/kubeconform
sudo apk add kubeconform- License: Apache-2.0
- Architecture: x86_64
- Source Package: kubeconform
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Kubeconform
pacman95%
kubeconform 0.7.0-2
FAST Kubernetes manifests validator, with support for Custom Resources!
https://github.com/yannh/kubeconform
sudo pacman -S kubeconform- License: Apache
- Architecture: x86_64
- 1 dependencies
- normalized package name match
- Matched by: Kubeconform
zypper95%
kubeconform 0.7.0-1.4
A fast Kubernetes manifests validator, with support for custom resources
https://github.com/yannh/kubeconform/
sudo zypper install kubeconform- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: kubeconform
- 1 provides
- normalized package name match
- Matched by: Kubeconform
MacPorts95%
kubeconform
sudo port install kubeconform- normalized package name match
- Matched by: Kubeconform
Scoop95%
main/kubeconform
scoop install main/kubeconform- normalized package name match
- Matched by: Kubeconform
winget95%
YannHamon.kubeconform
winget install --id YannHamon.kubeconform -e- normalized package name match
- Matched by: Kubeconform
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
使用的来源
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated agent safety answer
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment