# 使用 Homebrew, Nix 安装 kube-score

查看 kube-score 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:kube-score
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install kube-score
```

  证据: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#kube-score
```

  证据: nixpkgs package indexes: pkgs/by-name/ku/kube-score/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## 软件包事实

- **软件包键:** brew:kube-score
- **软件包管理器:** Homebrew
- **软件包管理器页面:** <https://formulae.brew.sh/formula/kube-score>
- **版本:** 1.20.0
- **来源摘要:** Kubernetes object analysis recommendations for improved reliability and security
- **主页:** <https://kube-score.com>
- **仓库:** <https://github.com/zegl/kube-score>
- **上游文档:** <https://kube-score.com>
- **许可证:** MIT
- **源码归档:** <https://github.com/zegl/kube-score.git>
- **最后更新:** 2026-07-27T21:58:43+02:00
- **已生成:** 2026-08-04T22:13:35+00:00

## 可执行文件

- kube-score (cli)
- kube-score (别名)

## 构建依赖

- go

## 安装行为

- post-install 钩子: 未定义
- Bottle: 可用 于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux

## 版本和新鲜度

- 页面生成时间: 2026-08-04
- 管理器版本: 1.20.0
- 管理器更新时间: 2026-07-27
- 本地数据: OK
- 上游仓库: https://github.com/zegl/kube-score
- 信息: No cached GitHub release or tag data was available.
## 项目历史与用法

kube-score is a Kubernetes manifest analysis CLI that scores object definitions and recommends reliability and security improvements. It is aimed at the pre-deployment stage, where YAML, Helm output, or Kustomize output can still be changed cheaply.

### 项目历史

The kube-score repository was created on 2018-09-16, and its first beta release, v0.1.0-beta1, was published on 2018-09-26. The README presents it as static code analysis for Kubernetes object definitions, with checks for resources, network policy coverage, pod disruption budgets, probes, security contexts, and stable APIs.

Unlike cluster-side policy systems, kube-score kept a developer-tool shape: a single CLI that reads manifests, prints human or machine-readable findings, and exits with a CI-friendly status code.

### 采用历史

The project documents several distribution paths: GitHub release binaries for macOS, Linux, and Windows, a Docker image, Homebrew, and Krew as the kubectl score plugin. Its website also hosts an online demo backed by the kube-score/web repository, giving users a low-friction way to try the checks without installing the CLI.

### 使用方式

Typical usage pipes rendered Kubernetes resources into kube-score, for example from helm template or kustomize build. The tool can also read static YAML files or resources exported from a live cluster, then produce recommendations in human, JSON, CI, or SARIF-oriented formats.

Annotations such as kube-score/ignore and kube-score/enable let users suppress or opt into checks on individual objects, which keeps the linter usable in repositories where not every workload has the same operational constraints.

### 为什么软件包爱好者会关心

kube-score matters in package-manager culture because it is a small, composable quality gate for Kubernetes manifests. It turns a broad operational checklist into a command that can live in a Makefile, pre-commit hook, GitHub Action, or CI job.

It also illustrates a common Kubernetes packaging pattern: one Go binary, release artifacts for multiple platforms, a Docker image for containerized CI, Homebrew for local developer machines, and Krew for kubectl-plugin users.

### 时间线

- 2018-09-16: GitHub repository created.
- 2018-09-26: First GitHub release, v0.1.0-beta1, published.
- 2018-10-08: v0.1.0 published.
- 2025-04-28: GitHub release v1.20.0 published.

### Related projects

- Helm and Kustomize are common input producers for kube-score.
- Krew distributes kube-score as a kubectl plugin named score.
- kube-score/web provides the browser demo linked from the README.
- KubeLinter occupies a related manifest-linting space with a stronger production-readiness and security-check branding.

### 来源

- <https://api.github.com/repos/zegl/kube-score>
- <https://api.github.com/repos/zegl/kube-score/releases>
- <https://formulae.brew.sh/formula/kube-score>
- <https://github.com/kube-score/web>
- <https://github.com/zegl/kube-score>
- <https://kube-score.com/>


## 安全说明

infrastructure mutation or orchestration signal.

- **Geiger 风险:** orange / 中
- infrastructure mutation or orchestration signal

## 源数据库详情

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** kube-score
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable

## 其他软件包管理器记录

- Nix - kube-score: normalized package name match | nixpkgs package indexes: pkgs/by-name/ku/kube-score/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1


## 相关链接

- [Cloud CLI packages](https://pkg.so/zh-hans/cloud-clis/) - Belongs to a cloud or infrastructure command family.
- [Secret-risk packages](https://pkg.so/zh-hans/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals.
- [Terminal utility packages](https://pkg.so/zh-hans/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Text processing packages](https://pkg.so/zh-hans/text-processing-tools/) - Matched text, document, or structured-data processing metadata.
- [go](https://pkg.so/zh-hans/brew/go/) - Build dependency declared by Homebrew.
- [kube-linter](https://pkg.so/zh-hans/brew/kube-linter/) - Shares pkgdb curated category or tags: cli, developer-tools, helm, kubernetes, static-analysis.
- [semgrep](https://pkg.so/zh-hans/brew/semgrep/) - Shares pkgdb curated category or tags: cli, developer-tools, security, static-analysis.
- [kubent](https://pkg.so/zh-hans/brew/kubent/) - Shares pkgdb curated category or tags: cli, developer-tools, helm, kubernetes.
- [kubergrunt](https://pkg.so/zh-hans/brew/kubergrunt/) - Shares pkgdb curated category or tags: cli, developer-tools, helm, kubernetes.
- [datadog-static-analyzer](https://pkg.so/zh-hans/brew/datadog-static-analyzer/) - Shares pkgdb curated category or tags: cli, developer-tools, security, static-analysis.
- [splint](https://pkg.so/zh-hans/brew/splint/) - Shares pkgdb curated category or tags: cli, developer-tools, security, static-analysis.
- [shellcheck](https://pkg.so/zh-hans/brew/shellcheck/) - Shares pkgdb curated category or tags: cli, developer-tools, static-analysis.
- [kubeconform](https://pkg.so/zh-hans/brew/kubeconform/) - Shares pkgdb curated category or tags: cli, developer-tools, kubernetes.

## Combined YAML source

View the package source record on GitHub. [combined/kube-score.yml](https://github.com/mxcl/pkgdb/blob/main/combined/kube-score.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- package-page enrichment
- curated package history
- package version freshness
- pkgdb category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph