kube-linter

Includes built-in checks for critical issues like containers running as root and missing read-only filesystems, directly addressing Kubernetes security best practices as highlighted in the examples.

Analyzes Kubernetes YAML files, Helm charts, and Kustomize manifests in a single tool, eliminating the need for separate linters for each format, as stated in the key features.

Provides detailed remediation suggestions and supports machine-readable formats like JSON and SARIF, facilitating easy integration into CI/CD pipelines for automated feedback.

Allows enabling/disabling checks and creating custom checks using Go templates, enabling teams to enforce organizational policies, as emphasized in the configurability section.