# 使用 Homebrew, MacPorts, Nix, pacman, zypper, scoop 安装 kube-linter
查看 kube-linter 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。
## 安装
```sh
sudo av install brew:kube-linter
```
其他安装命令:
### macOS
- Homebrew (100%):
```sh
brew install kube-linter
```
证据: local Homebrew formula metadata
- MacPorts (94%):
```sh
sudo port install kube-linter
```
证据: MacPorts ports tree: devel/kube-linter/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
### Linux
- Nix (92%):
```sh
nix profile install nixpkgs#kube-linter
```
证据: nixpkgs package indexes: pkgs/by-name/ku/kube-linter/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- pacman (92%):
```sh
sudo pacman -S kube-linter
```
证据: Arch Linux sync databases: kube-linter from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
- zypper (92%):
```sh
sudo zypper install kube-linter
```
证据: openSUSE Tumbleweed package metadata: kube-linter from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst
### Windows
- Scoop (92%):
```sh
scoop install main/kube-linter
```
证据: Scoop official bucket manifest trees: bucket/kube-linter.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
## 软件包事实
- **软件包键:** brew:kube-linter
- **软件包管理器:** Homebrew
- **版本:** 0.8.3
- **来源摘要:** Static analysis tool for Kubernetes YAML files and Helm charts
- **主页:**
- **仓库:**
- **最后更新:** 2026-07-27T21:58:42+02:00
- **已生成:** 2026-08-03T19:37:03+00:00
## 可执行文件
- kube-linter (别名)
## 安装行为
- Bottle: 不可用
## 版本和新鲜度
- 页面生成时间: 2026-08-03
- 管理器版本: 0.8.3
## 项目历史与用法
KubeLinter is StackRox's static-analysis CLI for Kubernetes manifests, Helm charts, and Kustomize output. It checks workload definitions before deployment and reports production-readiness and security recommendations such as non-root execution, least privilege, resource settings, and secret handling.
### 项目历史
The public GitHub repository was created on 2020-08-13, and the first GitHub release, 0.0.1, was published on 2020-09-17. StackRox announced KubeLinter publicly on 2020-10-28 as an open source tool for finding Kubernetes misconfigurations before workloads reach a cluster.
The project later became part of the StackRox/Red Hat Kubernetes security toolchain identity: its README says KubeLinter was created by StackRox and is powered by Red Hat. The codebase stayed focused on one job: linting Kubernetes YAML-family inputs with configurable checks and machine-readable output formats.
### 采用历史
KubeLinter's adoption path followed the normal Kubernetes CLI pattern: standalone release binaries, Homebrew packaging, Go installation, Docker images, and CI integration. The companion stackrox/kube-linter-action repository packages the same scanner as a GitHub Action for pull-request and workflow checks.
### 使用方式
Users run KubeLinter locally or in CI against rendered manifests, Helm charts, or Kustomize output. A failed check returns a non-zero exit code, which makes the tool useful as a lightweight guardrail before kubectl apply, Helm install, or a GitOps reconciler sees the manifests.
The config file convention in this batch, .kube-linter.yaml, matches the tool's configurable-policy role: teams can enable, disable, or define checks around their own Kubernetes baseline instead of accepting a single universal rule set.
### 为什么软件包爱好者会关心
For package people, KubeLinter is a good example of the security-shift-left wave becoming a small installable CLI. It sits next to kubectl, helm, kustomize, and CI actions rather than requiring a hosted service, which is why Homebrew and other package-manager delivery matter.
Its significance is less about replacing cluster admission policy and more about catching obvious manifest mistakes while the artifact is still text in a repository.
### 时间线
- 2020-08-13: GitHub repository created.
- 2020-09-17: First GitHub release, 0.0.1, published.
- 2020-10-28: StackRox announced KubeLinter as an open source Kubernetes misconfiguration scanner.
- 2026-03-10: GitHub release v0.8.3 published.
### Related projects
- kube-linter-action packages KubeLinter for GitHub Actions workflows.
- Helm and Kustomize are common upstream renderers for the manifests KubeLinter scans.
- Kubernetes admission controllers and policy engines such as OPA Gatekeeper solve related policy problems later in the deployment path.
### 来源
-
-
-
-
-
-
-
## 安全说明
infrastructure mutation or orchestration signal.
- **Geiger 风险:** orange / 中
- infrastructure mutation or orchestration signal
## Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
## Configuration files
- Unix: .kube-linter.yaml
## 其他软件包管理器记录
- Nix - kube-linter: normalized package name match | nixpkgs package indexes: pkgs/by-name/ku/kube-linter/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- pacman - kube-linter - 0.8.3-1: normalized package name match | Arch Linux sync databases: kube-linter from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Static analysis tool that checks Kubernetes YAML files and Helm charts | https://github.com/stackrox/kube-linter
- zypper - kube-linter - 0.8.3-1.5: normalized package name match | openSUSE Tumbleweed package metadata: kube-linter from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Static analysis tool that checks Kubernetes YAML files and Helm charts | https://github.com/stackrox/kube-linter
- zypper - kube-linter-bash-completion - 0.8.3-1.5: normalized package name match | openSUSE Tumbleweed package metadata: kube-linter-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Bash Completion for kube-linter | https://github.com/stackrox/kube-linter
- zypper - kube-linter-fish-completion - 0.8.3-1.5: normalized package name match | openSUSE Tumbleweed package metadata: kube-linter-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Fish Completion for kube-linter | https://github.com/stackrox/kube-linter
- zypper - kube-linter-zsh-completion - 0.8.3-1.5: normalized package name match | openSUSE Tumbleweed package metadata: kube-linter-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Zsh Completion for kube-linter | https://github.com/stackrox/kube-linter
- MacPorts - kube-linter: normalized package name match | MacPorts ports tree: devel/kube-linter/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
- Scoop - main/kube-linter: normalized package name match | Scoop official bucket manifest trees: bucket/kube-linter.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
## Combined YAML source
View the package source record on GitHub. [combined/kube-linter.yml](https://github.com/mxcl/pkgdb/blob/main/combined/kube-linter.yml)
## 来源
- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph