# kubescape を Homebrew, MacPorts, Nix, zypper, scoop, winget でインストール kubescape のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:kubescape ``` 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install kubescape ``` 証拠: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install kubescape ``` 証拠: MacPorts ports tree: sysutils/kubescape/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - Nix (92%): ```sh nix profile install nixpkgs#kubescape ``` 証拠: nixpkgs package indexes: pkgs/by-name/ku/kubescape/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper (92%): ```sh sudo zypper install kubescape ``` 証拠: openSUSE Tumbleweed package metadata: kubescape from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ### Windows - Scoop (92%): ```sh scoop install main/kubescape ``` 証拠: Scoop official bucket manifest trees: bucket/kubescape.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id kubescape.kubescape -e ``` 証拠: Windows Package Manager source index: kubescape.kubescape from https://cdn.winget.microsoft.com/cache/source.msix ## パッケージ情報 - **パッケージキー:** brew:kubescape - **パッケージマネージャ:** Homebrew - **パッケージマネージャページ:** - **バージョン:** 4.0.11 - **ソース概要:** Kubernetes testing according to Hardening Guidance by NSA and CISA - **ホームページ:** - **リポジトリ:** - **上流ドキュメント:** - **ライセンス:** Apache-2.0 - **ソースアーカイブ:** - **最終更新:** 2026-07-27T21:58:46+02:00 - **生成日時:** 2026-08-04T22:13:35+00:00 ## 実行可能ファイル - kubescape (cli) - kubescape (エイリアス) ## ビルド依存関係 - go ## インストール挙動 - post-install フック: 未定義 - Bottle: 利用可能 対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## バージョンと鮮度 - ページ生成日: 2026-08-04 - マネージャ版: 4.0.11 - マネージャ更新日: 2026-07-27 - ローカルデータ: OK - 上流リポジトリ: https://github.com/kubescape/kubescape - 情報: No cached GitHub release or tag data was available. ## プロジェクトの歴史と使われ方 Kubescape is an open source Kubernetes security and compliance platform, created by ARMO and hosted as a CNCF project. The CLI scans clusters, Kubernetes YAML, Helm charts, repositories, container registries, and images for misconfigurations, vulnerabilities, and risk. ### プロジェクトの歴史 Kubescape began as a Kubernetes-focused security scanner and expanded into a broader platform covering posture management, hardening, runtime security, image vulnerability scanning, admission control, and remediation workflows. Its repository describes coverage from development through runtime, including NSA-CISA, MITRE ATT&CK, and CIS benchmark-oriented checks. The CNCF project page records Kubescape's acceptance into CNCF on December 13, 2022 and its move to Incubating maturity on January 13, 2025. ### 採用の歴史 Kubescape's packaging shows adoption across developer and CI workflows: official docs list Homebrew installation, the project maintains a GitHub Action, and the README lists package-manager paths for Homebrew, Krew, Arch, Ubuntu, Nix, Chocolatey, and Scoop. ### 使われ方 The CLI is commonly used to scan a running Kubernetes cluster, scan local manifest directories, scan container images, list controls and frameworks, and integrate security checks into pull-request or CI pipelines. ### パッケージ好きにとっての重要性 Kubescape matters to package maintainers because it sits at the intersection of Kubernetes CLI tooling, security scanning databases, and policy frameworks. It is also an example of a CNCF security project with both a standalone CLI and in-cluster components. ### タイムライン - 2022: Kubescape was accepted to CNCF on December 13. - 2025: Kubescape moved to CNCF Incubating maturity on January 13. ### Related projects - Related projects and integrations include Kubernetes, Helm, Krew, Grype, Copacetic, Inspektor Gadget, GitHub Actions, and CNCF security/compliance tooling. ### ソース - - - - - ## セキュリティノート infrastructure mutation or orchestration signal. - **Geiger リスク:** orange / 中 - infrastructure mutation or orchestration signal ## ソースデータベース詳細 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** kubescape - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## 他のパッケージマネージャ記録 - Nix - kubescape: normalized package name match | nixpkgs package indexes: pkgs/by-name/ku/kubescape/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper - kubescape - 4.0.11-1.2: normalized package name match | openSUSE Tumbleweed package metadata: kubescape from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Tool providing a multi-cloud K8s single pane of glass | https://github.com/armosec/kubescape - MacPorts - kubescape: normalized package name match | MacPorts ports tree: sysutils/kubescape/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - Scoop - main/kubescape: normalized package name match | Scoop official bucket manifest trees: bucket/kubescape.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget - kubescape.kubescape: normalized package name match | Windows Package Manager source index: kubescape.kubescape from https://cdn.winget.microsoft.com/cache/source.msix ## 関連リンク - [Cloud CLI packages](https://pkg.so/ja/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Secret-risk packages](https://pkg.so/ja/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://pkg.so/ja/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/ja/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [go](https://pkg.so/ja/brew/go/) - Build dependency declared by Homebrew. - [kube-bench](https://pkg.so/ja/brew/kube-bench/) - Shares pkgdb curated category or tags: cli, compliance, kubernetes, security. - [kubehound](https://pkg.so/ja/brew/kubehound/) - Shares pkgdb curated category or tags: cli, kubernetes, security. - [checkov](https://pkg.so/ja/brew/checkov/) - Shares pkgdb curated category or tags: cli, compliance, kubernetes, security. - [kubeseal](https://pkg.so/ja/brew/kubeseal/) - Shares pkgdb curated category or tags: cli, kubernetes, security. - [terrascan](https://pkg.so/ja/brew/terrascan/) - Shares pkgdb curated category or tags: cli, compliance, kubernetes, security. - [ksops](https://pkg.so/ja/brew/ksops/) - Shares pkgdb curated category or tags: cli, kubernetes, security. - [kics](https://pkg.so/ja/brew/kics/) - Shares pkgdb curated category or tags: cli, compliance, security. - [gator](https://pkg.so/ja/brew/gator/) - Shares pkgdb curated category or tags: cli, kubernetes, security. ## Combined YAML source View the package source record on GitHub. [combined/kubescape.yml](https://github.com/mxcl/pkgdb/blob/main/combined/kubescape.yml) ## ソース - pkg.so package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph