gagarter/kubenumerate repository overview

⁠Kubenumerate

This image will spawn a container including the following tools for enumerating and checking compliance of a Kubernetes cluster:

• Kubeaudit
• Kube-bench
• Kubectl
• Trivy

It will extract the JSON and YAML output of kubectl, run kubeaudit and kube-bench, and then use the extracted kubectl output in JSON to pass it to Trivy, which will scan every single container image and tag that it finds running in the cluster.

To present you the information, Kubenumerate will generate an excel spreadsheet for you, covering every check kubeaudit does, the CIS compliance kube-bench does, and an additional sheet with all the vulnerable images Trivy finds, with the total number of highs and crits for each vulnerable image, and pinpointing which pods in which namespaces are using these images.

The source code can be found in https://github.com/0x5ubt13/kubenumerate⁠

For any feedback, please send a mail to [email protected]⁠