# Install netfetch with Homebrew, Nix, zypper K8s tool to scan clusters for network policies and unprotected workloads. Version 0.5.4 via Homebrew; verified 2026-07-26. Also installable with nix: nix profile install nixpkgs#netfetch. ## Install ```sh sudo av install brew:netfetch ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install netfetch ``` Evidence: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#netfetch ``` Evidence: nixpkgs package indexes: pkgs/by-name/ne/netfetch/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper (92%): ```sh sudo zypper install netfetch ``` Evidence: openSUSE Tumbleweed package metadata: netfetch from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ## Package facts - **Package key:** brew:netfetch - **Package manager:** Homebrew - **Version:** 0.5.4 - **Source summary:** K8s tool to scan clusters for network policies and unprotected workloads - **Homepage:** - **Repository:** - **Last updated:** 2026-07-26T19:43:15+02:00 - **Generated:** 2026-08-03T19:37:03+00:00 ## Executables - netfetch (alias) ## Install behavior - Bottle: not available ## Freshness - Page generated: 2026-08-03 - Package-manager version: 0.5.4 ## Project history and usage Netfetch is a small Kubernetes security CLI for scanning clusters for workloads that are not targeted by network policies. Its project README describes it as a work in progress aimed at demystifying Kubernetes network policies. ### Project history The public history is short and mostly lives in the GitHub repository and release page. The README documents a CLI-first tool with a dashboard, Kubernetes NetworkPolicy support, Cilium policy support in the CLI, Homebrew installation, Helm deployment for the dashboard, and a scoring model that decreases as more workloads run without policy coverage. ### Adoption history Adoption appears niche but real. The GitHub releases page showed 449 stars and 25 forks in the repository header, and the Homebrew formula page on July 1, 2026 reported 237 installs over 365 days and 39 installs over 30 days. That is consistent with a young Kubernetes operator/security helper rather than a foundational package. ### How it is used Users run netfetch scan against a kubeconfig-backed cluster to inspect all non-system namespaces or a named namespace, often with --dryrun while auditing. The README also documents --cilium for Cilium Network Policies, --target for inspecting a specific policy, and netfetch dash for a local dashboard that can scan, map pods and policies, preview YAML, and suggest policy changes. ### Why package nerds care The package is significant mainly for Kubernetes network-policy hygiene. Kubernetes documentation says NetworkPolicies control layer 3/4 traffic and require a network plugin that enforces them; Netfetch sits in the practical gap between 'policies exist' and 'which workloads are actually covered?'. It is not yet broad infrastructure, but it packages a useful audit loop into one command. ### Timeline - 2026-07-01: Homebrew listed stable version 0.5.4 and 237 installs over 365 days. - The GitHub releases page listed v0.5.4 as the latest release and documented changes around kubeconfig flag handling. ### Related projects - Kubernetes NetworkPolicy - Cilium NetworkPolicy - kubectl - Helm ### Sources - - - - ## Security Notes broad file, network, media, or database tool signal. infrastructure mutation or orchestration signal. - **Geiger risk:** orange / medium - broad file, network, media, or database tool signal - infrastructure mutation or orchestration signal ## Other Package-Manager Records - Nix - netfetch: normalized package name match | nixpkgs package indexes: pkgs/by-name/ne/netfetch/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper - netfetch - 0.5.4-1.8: normalized package name match | openSUSE Tumbleweed package metadata: netfetch from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Scanning clusters for network policies and identifying unprotected workloads | https://github.com/deggja/netfetch - zypper - netfetch-bash-completion - 0.5.4-1.8: normalized package name match | openSUSE Tumbleweed package metadata: netfetch-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Bash Completion for netfetch | https://github.com/deggja/netfetch - zypper - netfetch-fish-completion - 0.5.4-1.8: normalized package name match | openSUSE Tumbleweed package metadata: netfetch-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Fish Completion for netfetch | https://github.com/deggja/netfetch - zypper - netfetch-zsh-completion - 0.5.4-1.8: normalized package name match | openSUSE Tumbleweed package metadata: netfetch-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Zsh Completion for netfetch | https://github.com/deggja/netfetch ## Combined YAML source View the package source record on GitHub. [combined/netfetch.yml](https://github.com/mxcl/pkgdb/blob/main/combined/netfetch.yml) ## Sources - pkg.so package database - Geiger risk classifier - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph