Skip to content

v0.1 - Security Awareness Tool (Beta)

Choose a tag to compare

View all tags
@opscart opscart released this 25 Jan 18:41
· 239 commits to main since this release
v0.1
c53e045

v0.1 - Security Awareness Tool (Beta)

First public beta release of opscart-k8s-watcher - a Kubernetes security awareness and troubleshooting tool.

Important Disclaimer

This is a security awareness tool - NOT for:

  • Compliance auditing (use kube-bench)
  • Financial decision-making
  • Production security decisions without professional review

What it IS for:

  • Quick security posture checks
  • War room troubleshooting
  • Resource optimization opportunities
  • Trend tracking across environments

What's New in v0.1

Security Scanning

  • CIS Kubernetes Benchmark v1.8 scoring - Covers 7 pod security controls with weighted scoring
  • Environment-aware analysis - Automatically detects PRODUCTION, STAGING, DEVELOPMENT, and SYSTEM namespaces
  • Top 5 specific resources - Shows exactly which pods/containers have issues
  • Actionable recommendations - Direct kubectl commands and remediation steps

Transparency Improvements

  • Removed unvalidated financial risk calculations - No more fake probabilities, ROI projections, or made-up breach costs
  • Industry-cited benchmarks - Spot instance savings based on AWS/GCP/Azure published rates (~70-90%)
  • Clear disclaimers - Honest about tool limitations
  • Issue count validation - Transparent breakdown showing all detected issues

Quick Start

# Clone and build
git clone https://github.com/opscart/opscart-k8s-watcher.git
cd opscart-k8s-watcher
go build -o opscart-scan cmd/opscart-scan/main.go

# Run security scan
./opscart-scan security --cluster your-cluster

# Emergency scanner (war room)
./opscart-scan emergency --cluster your-cluster

# Resource analysis
./opscart-scan resources --cluster your-cluster
Assets 2
Loading