The safeguards map / 1.1 Code and dependencies
Kubescape
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A Kubernetes security platform whose scanner checks clusters, manifests, Helm charts and images for misconfigurations and vulnerabilities against published frameworks.
Where it sits
1.1 Code and dependencies (primary): Scans clusters, YAML files and Helm charts for misconfigurations against NSA-CISA, MITRE ATT&CK and CIS frameworks, and scans container images for known vulnerabilities.
Scan clusters, YAML files, and Helm charts against NSA-CISA, MITRE ATT&CK®, and CIS Benchmarks
captured
Detect CVEs in container images using
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who make itthose who run it
- Runs
- by handin CI
Handoffs
produces Findings: SARIF
Collector's note
The same README lists admission control with Validating Admission Policies, runtime monitoring, image patching and auto-remediation; those are not placed here because the sources read only name them in a feature table.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.