Kubectrl Kubesec

Provides specific, actionable recommendations like enforcing runAsNonRoot and dropping capabilities, directly helping users fix security misconfigurations based on scan outputs.

Installs as a kubectl plugin via krew or curl, allowing scans to be performed with familiar kubectl commands without leaving the CLI workflow.

Supports running kubesec locally with Docker, enabling use in air-gapped or private networks where cloud services are prohibited, as shown in the README examples.

Assigns a numerical security score to each resource, making it easy to prioritize fixes based on the severity of issues identified, such as critical vs. advisory items.