v0.5.0

sKan

sKan will scan your kubernetes resource files (manifests), and helm charts for security configurations issues and best practices.

skan is powered by Alcide Advisor scan engine and OPA

Install

Linux

wget -O skan https://github.com/alcideio/skan/releases/download/v0.5.0/skan_v0.5.0_linux_amd64 && chmod +x skan

Mac

wget -O skan https://github.com/alcideio/skan/releases/download/v0.5.0/skan_v0.5.0_darwin_amd64 && chmod +x skan

Command Line Examples

# Validate a YAML file. Multiple YAML files seperated with '---' is supported
skan manifest -f mydeployment.yaml -f myotherdeployment.yaml

# Validate all the resources found under the namespace 'myns' of a cluster with 'kubectl get'
kubectl get all -n myns -o yaml | skan manifest --report-passed -f -

# Validate resource kustomization
kubectl kustomize helloWorld | skan manifest -f -

# Validate Helm Chart
helm template kaudit deploy/charts/kaudit --set k8sAuditEnvironment=eks | skan manifest -f -