# Installer kubeconform avec Homebrew, apk, MacPorts, Nix, pacman, zypper, scoop, winget

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de kubeconform pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:kubeconform
```

## Réponse sur la sécurité des agents

kubeconform validates Kubernetes manifests and may read deployment configuration.

- **Accès aux identifiants:** Reads manifest files that may include secret references or generated values.
- **Modification distante:** Validation is local and does not mutate clusters.
- **Risque de publication ou d'artéfact:** Can validate deployable artifacts before cluster application.
- **Contrôle recommandé:** Gate only when scanning secret-bearing files or feeding apply pipelines.
- **Conseils d'utilisation par les agents:** Allow local validation; require approval before passing output into deployment commands.

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install kubeconform
```

  Preuve: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install kubeconform
```

  Preuve: MacPorts ports tree: sysutils/kubeconform/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add kubeconform
```

  Preuve: Alpine Linux edge package indexes: kubeconform from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz

- Nix (92%):

```sh
nix profile install nixpkgs#kubeconform
```

  Preuve: nixpkgs package indexes: pkgs/by-name/ku/kubeconform/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S kubeconform
```

  Preuve: Arch Linux sync databases: kubeconform from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install kubeconform
```

  Preuve: openSUSE Tumbleweed package metadata: kubeconform from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

### Windows

- Scoop (92%):

```sh
scoop install main/kubeconform
```

  Preuve: Scoop official bucket manifest trees: bucket/kubeconform.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

- winget (92%):

```sh
winget install --id YannHamon.kubeconform -e
```

  Preuve: Windows Package Manager source index: YannHamon.kubeconform from https://cdn.winget.microsoft.com/cache/source.msix

## Faits du paquet

- **Clé du paquet:** brew:kubeconform
- **Gestionnaire de paquets:** Homebrew
- **Version:** 0.8.0
- **Résumé source:** FAST Kubernetes manifests validator, with support for Custom Resources!
- **Page d'accueil:** <https://github.com/yannh/kubeconform>
- **Dépôt:** <https://github.com/yannh/kubeconform>
- **Dernière mise à jour:** 2026-07-27T21:58:44+02:00
- **Généré:** 2026-08-03T19:37:03+00:00

## exécutables

- kubeconform (alias)

## Comportement d'installation

- Bouteille: non disponible

## Version et fraîcheur

- page générée: 2026-08-03
- version du gestionnaire: 0.8.0
## Historique du projet et usages

Kubeconform is a Kubernetes manifest validator that grew out of the Kubeval lineage: its own documentation says it is inspired by, contains code from, and is designed to stay close to Kubeval while adding higher-throughput validation, configurable schema locations, CRD support, offline validation, and a schema registry fork for recent Kubernetes versions.

### Historique du projet

The GitHub repository was created on 2020-05-30. The public documentation feed dates the overview, installation, usage, CRD support, JSON Schema conversion, GitHub Action, and Go-module documentation pages to 2021-07-02, which matches the period when the project presented itself as a standalone replacement for common Kubeval workflows.

Kubeconform kept the Unix-style single-binary validator shape that made Kubeval popular in CI, but its distinguishing evolution was schema flexibility: users can validate against Kubernetes versions, local or remote schema locations, and converted CRD schemas rather than only core Kubernetes resources.

### Historique d'adoption

Adoption has been strongest in CI/CD and GitOps-adjacent workflows where teams want to fail manifest changes before applying them to a cluster. The tool's package-manager footprint across Homebrew, Linux distributions, Windows package managers, and Nix reflects a cross-platform CLI audience rather than a cluster-installed controller audience.

The repository metadata observed on 2026-07-01 showed more than 3000 GitHub stars, making it one of the better-known third-party Kubernetes manifest validators outside kubectl itself.

### Modes d'utilisation

Typical use is to pass files, directories, or stdin to `kubeconform`, optionally choosing output such as text, JSON, JUnit, or TAP and enabling summary output for CI logs. For custom resources, users point `-schema-location` at local or HTTP(S) JSON schemas, or convert CRDs to JSON Schema with the project-provided conversion tooling.

The package matters in validation pipelines because it gives maintainers a fast, scriptable check for Kubernetes resource structure without needing live cluster access.

### Pourquoi les passionnés de paquets s'y intéressent

For package-manager users, Kubeconform is the kind of small Go CLI that fits neatly into `brew install`, CI images, pre-commit hooks, and reproducible Nix shells. Its significance is not a broad runtime platform but a sharp replacement-class tool for a once-common Kubernetes validation gap.

### Chronologie

- 2020-05-30: GitHub repository created.
- 2021-07-02: Documentation pages published for overview, installation, usage, CRD support, JSON Schema conversion, GitHub Action usage, and Go-module usage.
- 2024-07-30: Release v0.6.7 published.
- 2025-05-12: Release v0.7.0 published.
- 2026-06-04: Release v0.8.0 published.

### Related projects

- Kubeval is the direct predecessor named by the Kubeconform documentation. The kubernetes-json-schema registry is part of the validation ecosystem because Kubeconform uses JSON schemas for Kubernetes resources and supports schema-location overrides for CRDs.

### Sources

- <https://api.github.com/repos/yannh/kubeconform>
- <https://github.com/yannh/kubeconform>
- <https://github.com/yannh/kubernetes-json-schema>
- <https://kubeconform.mandragor.org/docs/>
- <https://kubeconform.mandragor.org/docs/crd-support/>
- <https://kubeconform.mandragor.org/docs/usage/>


## Notes de sécurité

infrastructure mutation or orchestration signal.

- **Risque Geiger:** orange / moyen
- infrastructure mutation or orchestration signal

## Autres enregistrements de gestionnaires de paquets

- Nix - kubeconform: normalized package name match | nixpkgs package indexes: pkgs/by-name/ku/kubeconform/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- apk - kubeconform - 0.7.0-r9: normalized package name match | Alpine Linux edge package indexes: kubeconform from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | A FAST Kubernetes manifests validator, with support for Custom Resources! | https://github.com/yannh/kubeconform
- pacman - kubeconform - 0.7.0-2: normalized package name match | Arch Linux sync databases: kubeconform from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | FAST Kubernetes manifests validator, with support for Custom Resources! | https://github.com/yannh/kubeconform
- zypper - kubeconform - 0.8.0-1.3: normalized package name match | openSUSE Tumbleweed package metadata: kubeconform from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | A fast Kubernetes manifests validator, with support for custom resources | https://github.com/yannh/kubeconform/
- MacPorts - kubeconform: normalized package name match | MacPorts ports tree: sysutils/kubeconform/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
- Scoop - main/kubeconform: normalized package name match | Scoop official bucket manifest trees: bucket/kubeconform.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
- winget - YannHamon.kubeconform: normalized package name match | Windows Package Manager source index: YannHamon.kubeconform from https://cdn.winget.microsoft.com/cache/source.msix


## Combined YAML source

View the package source record on GitHub. [combined/kubeconform.yml](https://github.com/mxcl/pkgdb/blob/main/combined/kubeconform.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
- curated agent safety answer