macOS
Homebrewverified · 100%
brew install netfetchlocal Homebrew formula metadata
brew / rank 6663
Install netfetch with Homebrew, Nix, zypper
K8s tool to scan clusters for network policies and unprotected workloads. Version 0.5.4 via Homebrew; verified 2026-07-26. Also installable with nix: nix profile install nixpkgs#netfetch.
install
Additional install commands
Linux
Nixverified · 92%
nix profile install nixpkgs#netfetchnixpkgs package indexes · pkgs/by-name/ne/netfetch/package.nix · source: api.github.com
openSUSE zypperverified · 92%
sudo zypper install netfetchopenSUSE Tumbleweed package metadata · netfetch · source: download.opensuse.org
overview
Package summary
K8s tool to scan clusters for network policies and unprotected workloads
Project links
Commands and aliases
- netfetch
history
Project history and usage
Netfetch is a small Kubernetes security CLI for scanning clusters for workloads that are not targeted by network policies. Its project README describes it as a work in progress aimed at demystifying Kubernetes network policies.
Project history
The public history is short and mostly lives in the GitHub repository and release page. The README documents a CLI-first tool with a dashboard, Kubernetes NetworkPolicy support, Cilium policy support in the CLI, Homebrew installation, Helm deployment for the dashboard, and a scoring model that decreases as more workloads run without policy coverage.
Adoption history
Adoption appears niche but real. The GitHub releases page showed 449 stars and 25 forks in the repository header, and the Homebrew formula page on July 1, 2026 reported 237 installs over 365 days and 39 installs over 30 days. That is consistent with a young Kubernetes operator/security helper rather than a foundational package.
How it is used
Users run netfetch scan against a kubeconfig-backed cluster to inspect all non-system namespaces or a named namespace, often with --dryrun while auditing. The README also documents --cilium for Cilium Network Policies, --target for inspecting a specific policy, and netfetch dash for a local dashboard that can scan, map pods and policies, preview YAML, and suggest policy changes.
Why package nerds care
The package is significant mainly for Kubernetes network-policy hygiene. Kubernetes documentation says NetworkPolicies control layer 3/4 traffic and require a network plugin that enforces them; Netfetch sits in the practical gap between 'policies exist' and 'which workloads are actually covered?'. It is not yet broad infrastructure, but it packages a useful audit loop into one command.
Timeline
- 2026-07-01: Homebrew listed stable version 0.5.4 and 237 installs over 365 days.
- The GitHub releases page listed v0.5.4 as the latest release and documented changes around kubeconfig flag handling.
Related projects
- Kubernetes NetworkPolicy
- Cilium NetworkPolicy
- kubectl
- Helm
Sources
security posture
Risk level: orange
broad file, network, media, or database tool signal. infrastructure mutation or orchestration signal.
Risk classifier
orange risk · medium confidence · infrastructure
Why
- broad file, network, media, or database tool signal
- infrastructure mutation or orchestration signal
Signals
- text:cluster
- text:network
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
netfetch | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version0.5.4
manager updated2026-07-26
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:netfetch |
|---|---|
| Version | 0.5.4 |
| Package manager | Homebrew |
| Homepage | https://github.com/deggja/netfetch |
| Repository | https://github.com/deggja/netfetch |
| Last updated | 2026-07-26T19:43:15+02:00 |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Nix95%
netfetch
nix profile install nixpkgs#netfetch- normalized package name match
- Matched by: Netfetch
zypper95%
netfetch 0.5.4-1.8
Scanning clusters for network policies and identifying unprotected workloads
https://github.com/deggja/netfetch
sudo zypper install netfetch- License: MIT
- Category: Unspecified
- Architecture: x86_64
- Source Package: netfetch
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Netfetch
zypper95%
netfetch-bash-completion 0.5.4-1.8
Bash Completion for netfetch
https://github.com/deggja/netfetch
sudo zypper install netfetch-bash-completion- License: MIT
- Category: System/Shells
- Architecture: noarch
- Source Package: netfetch
- 2 dependencies
- 1 provides
- normalized package name match
- Matched by: Netfetch
zypper95%
netfetch-fish-completion 0.5.4-1.8
Fish Completion for netfetch
https://github.com/deggja/netfetch
sudo zypper install netfetch-fish-completion- License: MIT
- Category: System/Shells
- Architecture: noarch
- Source Package: netfetch
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Netfetch
zypper95%
netfetch-zsh-completion 0.5.4-1.8
Zsh Completion for netfetch
https://github.com/deggja/netfetch
sudo zypper install netfetch-zsh-completion- License: MIT
- Category: System/Shells
- Architecture: noarch
- Source Package: netfetch
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Netfetch
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- pkg.so package database
- pkgdb category and tag curation