Alternatives to KubeLinter

Review Kubernetes manifests for common configuration problems. The listings below can replace it for an important use case. Each note says what changes if you switch.

Replacements

Listings that take over the same core job as KubeLinter.

  • Checkov

    Scan infrastructure code for configuration problems.

    FreeOpen sourceWindowsmacOSLinuxCommand line

    Checkov scans several infrastructure-as-code formats with policy checks, so it covers more than Kubernetes manifests and Helm charts.

  • Trivy

    Scan software and infrastructure for known security issues.

    FreeOpen sourceWindowsmacOSLinuxCommand line

    Trivy adds container and filesystem vulnerability scanning alongside configuration checks, so one tool covers images as well as Kubernetes definitions.

  • Kubescape

    Assess Kubernetes configuration and runtime security.

    FreeOpen sourceWindowsmacOSLinuxCommand line

    Kubescape assesses live clusters and runtime security as well as configuration, which requires installation and permissions in the cluster rather than only static manifest review.

  • kube-bench

    Check Kubernetes settings against CIS benchmark tests.

    FreeOpen sourceLinuxCommand line

    kube-bench tests a running cluster's settings against CIS benchmarks rather than linting manifest files.

Similar software

Related functionality, not a direct replacement.