kube-bench

No entries match these filters. Clear filters

1. v0.16.0 (2026-08-05) Aug 5, 2026 · release notes

   kube-bench v0.16.0 adds CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. benchmarks for RH and RKE2 1.9

   • Adds rh-cis-1.9 benchmark configuration for Red Hat OpenShift Container Platform 1.9

   1 detail in Everything

2. v0.16.0 Aug 5, 2026 · release notes

   Adds CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. benchmarks for Red Hat 1.9 and RKE2 1.9 to kube-bench

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.16.0 https://github.com/aquasecurity/kube-bench.git
   # already have the repo? check out this version:
   $ git checkout v0.16.0

   • new Adds rh-1.9 CIS benchmark support (Red Hat OpenShift 1.9)
   • new Adds rke2-cis-1.9 CIS benchmark support for RKE2 clusters

   2 details in Everything

3. v0.15.5 May 20, 2026 · release notes

   kube-bench v0.15.5 adds CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. benchmark support for k3s 1.9 and GKEGKEGoogle Kubernetes Engine, Google's managed Kubernetes service, which lets cyber tools run containerized workloads without managing the underlying cluster infrastructure. 1.9.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.15.5 https://github.com/aquasecurity/kube-bench.git
   # already have the repo? check out this version:
   $ git checkout v0.15.5

   • Adds k3s-cis-1.9 CIS benchmark checks for auditing k3s clusters against the CIS 1.9 profile.
   • Adds GKE 1.9 benchmark checks for auditing Google Kubernetes Engine clusters against the gke-1.9 profile.

   2 details in Everything

4. v0.15.0 Feb 20, 2026 · release notes

   kube-bench v0.15.0 adds CIS BenchmarkCIS BenchmarkConsensus-based configuration hardening guidelines published by the Center for Internet Security, covering OSes, cloud platforms, and software; cyber tools use them as a ready-made ruleset to audit or enforce secure system baselines. support for EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves.-1.8 and CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline.-1.12 Kubernetes controls.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.15.0 https://github.com/aquasecurity/kube-bench.git
   # already have the repo? check out this version:
   $ git checkout v0.15.0

   • Adds CIS Benchmark for EKS-1.8, enabling compliance checks against the latest Amazon EKS hardening standard.
   • Adds CIS-1.12 benchmark support for Kubernetes clusters.

   2 details in Everything

5. v0.14.0 (2025-11-05) Nov 5, 2025 · release notes

   kube-bench v0.14.0 adds CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. benchmark support for rke2-cis-1.8

   └──▷ USE IT
   Scan an RKE2 cluster against the latest CIS benchmark profile.
   shell copy

   kube-bench run --targets=rke2-cis-1.8

6. v0.14.0 Nov 5, 2025 · release notes

   kube-bench v0.14.0 adds CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. benchmark support for RKE2-CIS-1.8.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.14.0 https://github.com/aquasecurity/kube-bench.git
   # already have the repo? check out this version:
   $ git checkout v0.14.0

   └──▷ TRY IT
   Run RKE2-CIS-1.8 benchmark checks against an RKE2 cluster to assess compliance with the new profile.
   copy

   $ kube-bench --benchmark rke2-cis-1.8

7. v0.13.0 Sep 29, 2025 · release notes

   kube-bench v0.13.0 adds CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. 1.11, GKEGKEGoogle Kubernetes Engine, Google's managed Kubernetes service, which lets cyber tools run containerized workloads without managing the underlying cluster infrastructure. 1.8.0, RH 1.4 and RH 1.8 benchmark support

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.13.0 https://github.com/aquasecurity/kube-bench.git
   # already have the repo? check out this version:
   $ git checkout v0.13.0

   • Adds CIS KubernetesCIS KubernetesHardening benchmarks published by the Center for Internet Security for Kubernetes clusters, giving cyber tools a concrete, versioned checklist of configuration checks to run and report against. benchmark v1.11 checks.
   • Adds CIS benchmark profile for GKE v1.8.0.
   • Adds Red Hat OpenShift benchmark v1.4 checks.
   • Adds CIS benchmark checks for Red Hat OpenShift v1.8.
   • Adds support for a default value on the EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves. 1.7 eventRecordQPS rule, reducing false positives in default cluster configurations.

   5 details in Everything

8. v0.12.0 Aug 22, 2025 · release notes

   kube-bench v0.12.0 adds CIS BenchmarkCIS BenchmarkConsensus-based configuration hardening guidelines published by the Center for Internet Security, covering OSes, cloud platforms, and software; cyber tools use them as a ready-made ruleset to audit or enforce secure system baselines. support for EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves. v1.7.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.12.0 https://github.com/aquasecurity/kube-bench.git
   # already have the repo? check out this version:
   $ git checkout v0.12.0

   • Adds CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. Benchmark checks for Amazon EKS v1.7 (eks-v1.7).

   1 detail in Everything

9. v0.11.0 Jun 17, 2025 · release notes

   kube-bench v0.11.0 adds CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. benchmark support for AKSAKSAzure Kubernetes Service, Microsoft's managed Kubernetes offering, which lets cyber tools offload cluster provisioning and scaling to Azure so engineers focus on workload logic instead of control-plane operations. 1.7.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.11.0 https://github.com/aquasecurity/kube-bench.git
   # already have the repo? check out this version:
   $ git checkout v0.11.0

   • Adds AKS-1.7 benchmark version, enabling CIS compliance checks against Azure Kubernetes Service 1.7 clusters.

   1 detail in Everything

10. v0.10.0 Jan 16, 2025 · release notes

    kube-bench v0.10.0 adds CIS KubernetesCIS KubernetesHardening benchmarks published by the Center for Internet Security for Kubernetes clusters, giving cyber tools a concrete, versioned checklist of configuration checks to run and report against. 1.10 benchmark for k8s v1.28–v1.31 and CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves. 1.5.0 support.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.10.0 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.10.0

    • Adds CIS Kubernetes CIS-1.10 benchmark covering Kubernetes v1.28 through v1.31.
    • Adds CIS EKS 1.5.0 benchmark support for Amazon EKS cluster auditing.

    2 details in Everything

11. v0.9.0 Oct 11, 2024 · release notes

    kube-bench v0.9.0 adds GKEGKEGoogle Kubernetes Engine, Google's managed Kubernetes service, which lets cyber tools run containerized workloads without managing the underlying cluster infrastructure. 1.6 CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. benchmark, overhauled K3s scans, and expanded EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves. kubelet config coverage.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.9.0 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.9.0

    • Adds GKE 1.6 CIS benchmark support for GCP environments.
    • Overhauls K3s scan checks for improved accuracy and coverage.
    • Extends the default kubelet config file list to cover AWS EKS nodes.

    3 details in Everything

12. v0.7.0 Dec 19, 2023 · release notes

    kubernetes tooling now checks Rancher RKE/RKE2/K3s distributions and CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. v1.8.0

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.7.0 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.7.0

    • Adds CIS Benchmarks support for Rancher Distributions including RKE, RKE2, and K3s
    • Adds support for the CIS Kubernetes Benchmark v1.8.0 specification

    2 details in Everything

13. v0.6.15 Jun 6, 2023 · release notes

    kube-bench v0.6.15 adds CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. benchmark coverage for EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves. v1.2.0, Tanzu TKGI v1.2.53, and K8s v1.7.0.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.6.15 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.6.15

    • --benchmark e1_2_0 enables scanning against the new CIS Amazon EKS Benchmark v1.2.0
    • --benchmark tkgi_1_2_53 enables scanning against VMware Tanzu (TKGI) Benchmarks v1.2.53
    • --benchmark cis-1.7 enables scanning against the general CIS KubernetesCIS KubernetesHardening benchmarks published by the Center for Internet Security for Kubernetes clusters, giving cyber tools a concrete, versioned checklist of configuration checks to run and report against. Benchmark v1.7.0

    3 details in Everything

14. v0.6.11 Feb 5, 2023 · release notes

    Adds --datadir flag to specify custom etcd data directories for CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. benchmark checks in kube-bench v0.6.11

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.6.11 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.6.11

15. v0.6.10 Oct 16, 2022 · release notes

    kube-bench v0.6.10 adds EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves. Benchmark v1.1.0 and K3s CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline.-1.6 support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.6.10 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.6.10

    • eks-stig-kubernetes-v1r6 benchmark added for checking compliance against the EKS STIGSTIGA configuration standard published by DISA that specifies hardening requirements for a given OS, application, or device, giving cyber tools a concrete checklist to audit or enforce against. standard.
    • cis-amazon-eks-1.1.0 benchmark now supported to scan EKS clusters against the latest CIS benchmark.

    2 details in Everything

16. v0.6.9 Aug 10, 2022 · release notes

    Adds support for CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline.-1.23 1.0.0 and ppc64le architecture

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.6.9 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.6.9

17. v0.6.8 Apr 24, 2022 · release notes

    Adds CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline.-1.23 1.0.0 benchmark support to kube-bench

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.6.8 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.6.8

18. v0.6.7 Apr 3, 2022 · release notes

    Adds support for new CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. architectures (ppc64le and s390x) to the kube-bench binary.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.6.7 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.6.7

    • Adds s390x architecture build
    • Adding support for new cpu architecture (ppc64le)

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Removes Master and Node subcommands
19. v0.6.6 Jan 12, 2022 · release notes

    Adds support for Talos, Yandex Managed Kubernetes, GKEGKEGoogle Kubernetes Engine, Google's managed Kubernetes service, which lets cyber tools run containerized workloads without managing the underlying cluster infrastructure. 1.2.0, EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves. 1.0.1, and arm64

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.6.6 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.6.6

    └──▷ USE IT
    Connect to a remote PostgreSQL database for results using the new environment variable.
    shell copy

    K8S_HOST=remote-db.example.com kube-bench psql

    • Add various paths as used by Talos
    • Support CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. Google Kubernetes Engine (GKE) Benchmark v1.2.0
    • Support CIS Amazon Elastic Kubernetes Service (EKS) Benchmark v1.0.1
    • Support Yandex Managed Service for Kubernetes
    • Support arm64 architecture

    +1 more show less

    • Allow for usage of env var K8S_HOST in psql

    6 details in Everything

20. v0.5.0 Jan 20, 2021 · release notes

    kube-bench v0.5.0 adds AWS Security Hub export, AKSAKSAzure Kubernetes Service, Microsoft's managed Kubernetes offering, which lets cyber tools offload cluster provisioning and scaling to Azure so engineers focus on workload logic instead of control-plane operations. Job, --skip/--exit-code flags, and custom kubeconfig paths

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.5.0 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.5.0

    • Send kube-bench output to AWS Security Hub in ASFF format
    • Adds --skip parameter to skip groups and checks
    • Adds --exit-code parameter for failed checks
    • Adds Kubernetes Job for running on Azure Kubernetes Service (AKS)
    • Customize kubeconfig locations for kube-scheduler and kube-controller-manager

    5 details in Everything

21. v0.4.0 Oct 5, 2020 · release notes

    kube-bench v0.4.0 adds CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. 1.6 support, EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves.-1.0 mappings, and POSIXPOSIXA family of standards for operating-system interfaces, including process, file and shell behavior. Software that uses these interfaces is easier to move between compatible systems.-compliant kubelet cafile test

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.4.0 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.4.0

    └──▷ USE IT
    Scan an EKS cluster against the newly supported CIS v1.6 benchmark
    shell copy

    kube-bench run --targets=master,node --version=eks-1.0

    Scan a standard Kubernetes 1.18 cluster using the updated mapping
    shell copy

    kube-bench run --targets=node --version=k8s-1.18

    • Adds support for the CIS KubernetesCIS KubernetesHardening benchmarks published by the Center for Internet Security for Kubernetes clusters, giving cyber tools a concrete, versioned checklist of configuration checks to run and report against. Benchmark v1.6
    • Adds eks-1.0 mapping to enable scanning Amazon EKS environments against the correct benchmark profile
    • Adds mappings for Kubernetes version 1.18

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Retires support for CIS benchmarks 1.3 and 1.4; scanning these versions is no longer possible in this release.
22. v0.3.0 Apr 6, 2020 · release notes

    Adds Microk8s config paths, GKEGKEGoogle Kubernetes Engine, Google's managed Kubernetes service, which lets cyber tools run containerized workloads without managing the underlying cluster infrastructure. support, bitmask option, and YAML extension support in v0.3.0

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.3.0 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.3.0

    • Adds --bitmask flag to allow filtering checks using bitwise operations
    • Supports config files with .yml extension in addition to .yaml

    2 details in Everything

23. v0.2.3 Jan 22, 2020 · release notes

    Adds specific file permission checks (444, 440, 400, 000) to all CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. benchmarks.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.2.3 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.2.3

24. v0.2.0 Nov 22, 2019 · release notes

    kube-bench v0.2.0 adds JUnit output and automatic K8s version detection via REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.2.0 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.2.0

    └──▷ TRY IT
    Generate JUnit XMLJUnit XMLA widely adopted test-report file format, originally from the Java JUnit framework, that records test suite results as XML; cyber tools emit it so their output plugs into CI systems like Jenkins or GitLab without custom parsers. reports for CI/CD pipeline integration
    copy

    $ kube-bench --format=junit

    • Adds --format=junit option to output results in JUnit XML format
    • Automatically determines the Kubernetes version using the cluster's REST API

    2 details in Everything

25. v0.1.0 Nov 6, 2019 · release notes

    kube-bench v0.1.0 adds JSON/executable parameter configuration support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.1.0 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.1.0

26. v0.0.29 Jun 18, 2019 · release notes

    kube-bench v0.0.29 adds --version, --outputfile, and saves audit commands in JSON output

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.0.29 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.0.29

    └──▷ USE IT
    Run a scan and save the JSON report to report.json for automated processing.
    shell copy

    kube-bench --outputfile=report.json run master

    • Adds --version subcommand to print the kube-bench version.
    • Adds --outputfile flag to write JSON results directly to a specified file path.
    • Saves the executed audit command under the audit key in JSON output for failed tests.

    3 details in Everything

27. v0.0.28 Apr 23, 2019 · release notes

    Adds ':' as a valid flag-value separator for tests in kube-bench

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.0.28 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.0.28

    • Allows using : (colon) as the separator between test flags and their values in addition to the existing syntax

    1 detail in Everything

28. v0.0.27 Mar 18, 2019 · release notes

    Adds automatic node type detection for kube-bench runs

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.0.27 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.0.27

    • Adds master node detection and a root command that automatically detects checks to run

    1 detail in Everything

29. v0.0.21 Oct 4, 2018 · release notes

    Adds --json support with actual_result field to kube-bench

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.0.21 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.0.21

    └──▷ TRY IT
    Check Kubernetes node configuration and inspect the actual result for each control in JSON format.
    copy

    $ kube-bench --json node

    • --json output now includes the actual_result field alongside the standard CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. benchmark results
    • Updates README.md and adds link to CIS kubernetes benchmark documentation

    2 details in Everything

30. v0.0.15 May 11, 2018 · release notes

    Adds --request-timeout, --kube-bench-version, --config-dir, --noremediations, --nosummary, and --noresults flags.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.0.15 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.0.15

    └──▷ USE IT
    Limit the time spent waiting for Kubernetes API responses during benchmarking.
    shell copy

    kube-bench --request-timeout=30s

    Generate a concise report containing only the raw findings without remediation steps or summary tables.
    shell copy

    kube-bench --noremediations --nosummary --noresults

    • Add --request-timeout flag to specify Kubernetes API client timeout duration
    • Add --config-dir flag to override the default configuration directory path
    • Add --noremediations, --nosummary, and --noresults flags to filter output sections

    3 details in Everything

31. v0.0.12 Apr 4, 2018 · release notes

    kube-bench v0.0.12 adds Kubernetes 1.9/1.10 CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. benchmarks and removes kubectl dependency

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.0.12 https://github.com/aquasecurity/kube-bench.git
    # already have the repo? check out this version:
    $ git checkout v0.0.12

    • Adds 1.8 benchmark tests for Kubernetes versions 1.9 and 1.10, enabling CIS compliance checks on these specific cluster versions.
    • Removes the hard requirement for kubectl to be installed by allowing version information to be gleaned directly from kubelet.

    2 details in Everything