kubesec

README

kubesec analyzer

kubesec analyzer performs SAST scanning on repositories containing code written in the following language: YAML. It processes .yml and yaml files.

The analyzer wraps kubesec static analyzer and is written in Go. It's structured similarly to other Static Analysis analyzers because it uses the shared command package.

The analyzer is built and published as a Docker image in the GitLab Container Registry associated with this repository. You would typically use this analyzer in the context of a SAST job in your CI/CD pipeline. However, if you're contributing to the analyzer or you need to debug a problem, you can run, debug, and test locally using Docker.

For instructions on local development, please refer to the README in Analyzer Scripts.

Versioning and release process

Please check the versioning and release process documentation.

Contributing

Contributions are welcome, see CONTRIBUTING.md for more details.

License

This code is distributed under the MIT Expat license, see the LICENSE file.