# Install netfetch with Homebrew, Nix, zypper K8s tool to scan clusters for network policies and unprotected workloads. Version 0.5.4 via Homebrew; verified 2026-07-26. Also installable with nix: nix profile install nixpkgs#netfetch. ## Install ```sh sudo av install brew:netfetch ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install netfetch ``` Evidence: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#netfetch ``` Evidence: nixpkgs package indexes: pkgs/by-name/ne/netfetch/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper (92%): ```sh sudo zypper install netfetch ``` Evidence: openSUSE Tumbleweed package metadata: netfetch from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ## Package facts - **Package key:** brew:netfetch - **Package manager:** Homebrew - **Package manager page:** - **Version:** 0.5.4 - **Source summary:** K8s tool to scan clusters for network policies and unprotected workloads - **Homepage:** - **Repository:** - **License:** MIT - **Source archive:** - **Last updated:** 2026-07-26T19:43:15+02:00 - **Generated:** 2026-08-04T22:13:35+00:00 ## Executables - netfetch (cli) - netfetch (alias) ## Build dependencies - go ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-08-04 - Package-manager version: 0.5.4 - Package-manager updated: 2026-07-26 - Local data: ok - Upstream repository: https://github.com/deggja/netfetch - Upstream latest detected: v0.5.4 (current) ## Project history and usage Netfetch is a small Kubernetes security CLI for scanning clusters for workloads that are not targeted by network policies. Its project README describes it as a work in progress aimed at demystifying Kubernetes network policies. ### Project history The public history is short and mostly lives in the GitHub repository and release page. The README documents a CLI-first tool with a dashboard, Kubernetes NetworkPolicy support, Cilium policy support in the CLI, Homebrew installation, Helm deployment for the dashboard, and a scoring model that decreases as more workloads run without policy coverage. ### Adoption history Adoption appears niche but real. The GitHub releases page showed 449 stars and 25 forks in the repository header, and the Homebrew formula page on July 1, 2026 reported 237 installs over 365 days and 39 installs over 30 days. That is consistent with a young Kubernetes operator/security helper rather than a foundational package. ### How it is used Users run netfetch scan against a kubeconfig-backed cluster to inspect all non-system namespaces or a named namespace, often with --dryrun while auditing. The README also documents --cilium for Cilium Network Policies, --target for inspecting a specific policy, and netfetch dash for a local dashboard that can scan, map pods and policies, preview YAML, and suggest policy changes. ### Why package nerds care The package is significant mainly for Kubernetes network-policy hygiene. Kubernetes documentation says NetworkPolicies control layer 3/4 traffic and require a network plugin that enforces them; Netfetch sits in the practical gap between 'policies exist' and 'which workloads are actually covered?'. It is not yet broad infrastructure, but it packages a useful audit loop into one command. ### Timeline - 2026-07-01: Homebrew listed stable version 0.5.4 and 237 installs over 365 days. - The GitHub releases page listed v0.5.4 as the latest release and documented changes around kubeconfig flag handling. ### Related projects - Kubernetes NetworkPolicy - Cilium NetworkPolicy - kubectl - Helm ### Sources - - - - ## Security Notes broad file, network, media, or database tool signal. infrastructure mutation or orchestration signal. - **Geiger risk:** orange / medium - broad file, network, media, or database tool signal - infrastructure mutation or orchestration signal ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** netfetch - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Nix - netfetch: normalized package name match | nixpkgs package indexes: pkgs/by-name/ne/netfetch/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper - netfetch - 0.5.4-1.8: normalized package name match | openSUSE Tumbleweed package metadata: netfetch from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Scanning clusters for network policies and identifying unprotected workloads | https://github.com/deggja/netfetch - zypper - netfetch-bash-completion - 0.5.4-1.8: normalized package name match | openSUSE Tumbleweed package metadata: netfetch-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Bash Completion for netfetch | https://github.com/deggja/netfetch - zypper - netfetch-fish-completion - 0.5.4-1.8: normalized package name match | openSUSE Tumbleweed package metadata: netfetch-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Fish Completion for netfetch | https://github.com/deggja/netfetch - zypper - netfetch-zsh-completion - 0.5.4-1.8: normalized package name match | openSUSE Tumbleweed package metadata: netfetch-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Zsh Completion for netfetch | https://github.com/deggja/netfetch ## Related links - [Cloud CLI packages](https://pkg.so/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Source-control packages](https://pkg.so/source-control-tools/) - Belongs to a source-control command family. - [Secret-risk packages](https://pkg.so/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://pkg.so/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [go](https://pkg.so/brew/go/) - Build dependency declared by Homebrew. - [checkov](https://pkg.so/brew/checkov/) - Shares pkgdb curated category or tags: cli, kubernetes, security. - [kubescape](https://pkg.so/brew/kubescape/) - Shares pkgdb curated category or tags: cli, kubernetes, security. - [terrascan](https://pkg.so/brew/terrascan/) - Shares pkgdb curated category or tags: cli, kubernetes, security. - [gator](https://pkg.so/brew/gator/) - Shares pkgdb curated category or tags: cli, kubernetes, security. - [kube-bench](https://pkg.so/brew/kube-bench/) - Shares pkgdb curated category or tags: cli, kubernetes, security. - [roxctl](https://pkg.so/brew/roxctl/) - Shares pkgdb curated category or tags: cli, kubernetes, security. - [kubehound](https://pkg.so/brew/kubehound/) - Shares pkgdb curated category or tags: cli, kubernetes, security. - [gnutls](https://pkg.so/brew/gnutls/) - Shares pkgdb curated category or tags: cli, security. - [terraform-iam-policy-validator](https://pkg.so/brew/terraform-iam-policy-validator/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, policies, policy, security. - [authoscope](https://pkg.so/brew/authoscope/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, network, security. ## Combined YAML source View the package source record on GitHub. [combined/netfetch.yml](https://github.com/mxcl/pkgdb/blob/main/combined/netfetch.yml) ## Sources - pkg.so package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph