https://cybertoolchain.io/tools/kubescape New releases and features in kubescape, tracked by The Cyber Toolchain. en Wed, 28 Oct 2026 10:29:34 GMT https://github.com/kubescape/kubescape/releases/tag/v4.0.17 https://github.com/kubescape/kubescape/releases/tag/v4.0.17 Wed, 28 Oct 2026 10:29:34 GMT Kubescape adds MCP server tools, fleet config file support, graded fleet exit codes, webhook notifications for image scans, and CISA KEV/EPSS in image scan output⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Read fleet settings from a config file with `feat(fleet): read fleet settings from a config file`⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Add `--notify` webhook support for image scans with `--notify` • Improves MCP server tools: adds an `include_identity` parameter to `analyze_vulnerability_exposure`, adds filtering and pagination to `list_vulnerabilities_in_manifest`, adds control filtering to `get_configuration_security_scan_manifest`, filters `list_controls` by framework, paginates `list_controls` responses, and counts unchanged findings in `diff_reports` while listing them only on request. • Adds `create_admission_policy_binding`, `list_configuration_security_scan_summaries`, `list_sboms`, `list_sbom_packages`, and `validate_scan_selection` (with shared control resolution) tools to the MCP server. • Apply remediation for report items from posture reports via MCP • Emit graded exit codes for fleet runs • Show CISA KEV and EPSS scores in image scan output • Keep exception audit trail in SARIF results • Evaluate Gateway API `ReferenceGrant` objects for cross-namespace backends in exposure analysis • Adds an `--output-post-renderer` flag to the `fix` command for Helm, hardens overlay staging and boundaries, and renders Helm charts for the newest Kubernetes version their `kubeVersion` allows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v4.0.16 https://github.com/kubescape/kubescape/releases/tag/v4.0.16 Wed, 14 Oct 2026 13:00:31 GMT Kubescape v4.0.16 adds PSS compliance prediction, interactive remediation, image diff, Red Hat Quay scanning, and new MCP tools for AI assistants.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--kube-version` and `--api-versions` flags to `kubescape scan` for accurate Helm chart rendering against a specific Kubernetes API surface.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--interactive` mode to `kubescape fix` for granular, step-by-step remediation of misconfigurations. • Adds `kubescape diff` subcommand to compare image scan reports and surface newly introduced and resolved vulnerabilities. • Adds `list_admission_policies` and `diff_reports` tools, a PSS compliance prediction tool, and a secret exposure detection tool to the MCP server, exposing admission policy enumeration, scan report comparison, PSS compliance prediction, and secret exposure detection to AI assistants. • Adds `predict` subcommand with a Pod Security Standards (PSS) compliance predictor CLI. • Surfaces richer diagnostics across report formats: attack-path priority score and severity in `SARIF` result properties, skipped and unevaluated controls in `JUnit XML` output, and scan coverage plus skipped-control diagnostics in `PDF` output. • Accounts for external exposure when analysing vulnerability risk in image scans. • Retries clusters whose API server never answered during fleet scans. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v4.0.15 https://github.com/kubescape/kubescape/releases/tag/v4.0.15 Tue, 29 Sep 2026 06:09:31 GMT Kubescape v4.0.15 adds multi-cluster fleet scanning, Quay image scanning, namespace-filter hot-reload, and scan-coverage metrics in reports.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--fleet-report` flag to `kubescape scan` to write one combined report across multiple clusters specified with `--kube-contexts`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--show-evidence` output that now resolves fix-path line numbers for delete and review paths. • Adds `kubescape config view` support for filtering configurations by key. • Adds support for deleting specific configuration keys via `kubescape config`. • Adds `--output-dir` support honoured for file-based reports. • Adds Quay vulnerability scanning support for image scans. • Adds full Azure credential chain support for ACR image pulls in image scanning. • Adds scan coverage metrics to Markdown, HTML, and CSV report outputs. • Adds reporting of degraded scan coverage and skipped controls in printer output. • Adds compliance rollup to the fleet report. • Adds a fleet summary printed after a multi-context scan. • Adds reporting of controls that clusters disagree on in fleet scans. • Adds hot-reload of namespace filters in the HTTP handler without requiring a restart. • Adds complete Agent Runtime policy set to VAP (`kubescape vap`). • Introduces partition and spill store engine for large-cluster resource handling. • Uses mmap and fastjson for manifest parsing, improving performance on large manifest sets. • Adds support for key-signed images without a transparency log entry in control C-0236. • Adds execution policies for whole-cluster controls in the OPA processor. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v4.0.14 https://github.com/kubescape/kubescape/releases/tag/v4.0.14 Wed, 09 Sep 2026 12:42:24 GMT Kubescape v4.0.14 adds fleet-wide multi-cluster scanning, `--framework`/`--search` filters for `list controls`, and structured MCP error responses. • Adds `--framework` and `--search` filters to `kubescape list controls` to narrow the control listing by framework or keyword. • Extends `--kube-contexts` fleet mode in `kubescape scan` to support framework, control, and workload scan targets across multiple clusters. • Adds cross-cluster control matrix and fleet report types for fleet-wide posture aggregation. • Introduces structured, machine-readable error responses in the `kubescape mcpserver` MCP server. • Adds `host-users-root-workload-v1` detection rule to identify workloads running as host root users. • Extends the `provider-iam-assumption-v1` rule to detect Azure AKS Workload Identity. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v4.0.13 https://github.com/kubescape/kubescape/releases/tag/v4.0.13 Wed, 02 Sep 2026 08:44:18 GMT Kubescape v4.0.13 adds custom Rego rules, offline image scanning, VEX surfacing, new RBAC controls, MCP tools, and fix/list/config improvements. • Adds `--custom-rules` flag to load user-authored Rego rules from the standard rule directory layout during scans. • Adds `--skip-db-update` flag to `kubescape scan image` for fully offline/air-gapped image vulnerability scanning. • Adds `--include-controls` and `--skip-controls` flags to `kubescape fix` to select which controls get remediated. • Adds `--format` / `-f` flag to `kubescape config view` to control output format. • Adds `scan_controls`, `scan_local_iac_controls`, `list_frameworks`, and `list_controls` tools to the MCP server for AI assistant integration. • Extends `kubescape fix` to support cluster scan reports by printing patched manifests (previously only file-based manifests were supported). • Enables `kubescape fix` to apply fixes to JSON manifests (in addition to YAML). • New control `C-0298` detects RBAC subjects that can attach ephemeral containers to pods. • Adds RBAC-police rules covering `impersonate`, `token-mint`, `escalate`, `bind`, `node-proxy`, and PV create privilege escalation paths. • Surfaces VEX (Vulnerability Exploitability eXchange) status in image scan reports. • Adds native GitLab vulnerability adaptor for image scanning output. • Adds native Harbor vulnerability adaptor for image scanning output. • Adds multi-arch image support: scans the correct platform for multi-arch images. • Adds `MutatingAdmissionPolicy` discovery and impact matching to the admission-policy map reconciler. • Models external exposure via Ingress, Gateway API, and `Service` type, plus `spec.externalIPs`, in the exposure engine. • Evaluates VAP `matchConditions` offline instead of refusing the control, and honors `spec.failurePolicy` for validation expression errors. • Adds opt-in audit logging for posture exceptions. • Adds filter support to `kubescape list controls` — filter by framework and search term. • Adds display of the control configuration a scan evaluates against to `kubescape list`. • Adds aggregate summary outputs to `kubescape diff`. • Flags frameworks scored 100% purely from irrelevant controls and reports resource kinds that no control examined, improving coverage transparency. • Adds URL context to repository scanner error messages for easier diagnosis. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v4.0.12 https://github.com/kubescape/kubescape/releases/tag/v4.0.12 Wed, 12 Aug 2026 08:32:20 GMT Kubescape v4.0.12 adds MCP server tools, new scan flags, Terraform scanning, cloud registry adaptors, markdown output, and more. • Adds `DELETE /v1/scan` API endpoint to cancel an in-flight scan. • Adds `--api-version` flag to the workload `scan` command to specify the API version of the scanned resource. • Adds `--label-selector` flag to filter collected resources during a scan. • Adds `--only-fixable` flag to gate scan image severity threshold on fix availability. • Adds `--output json` flag to the `version` command for machine-readable version info. • Adds `markdown` output format to the scan printer (alongside existing JSON, SARIF, HTML, CSV, etc.). • Adds `csv` output format to the `list` command. • Adds `yaml` output format to the `list` command. • Adds configurable output formats to `config view`. • Adds CSV output format with remediation path evidence columns to scan results. • Supports all output formats for image scans (aligning `patch` and `scan image` output options). • Supports scanning local offline tarball images with `kubescape scan image`. • Adds `scan_container_image` MCP server tool for on-demand container image vulnerability scanning. • Adds a headless framework security scanner MCP tool via `kubescape mcpserver`. • Adds a local IaC scanner MCP tool via `kubescape mcpserver`. • Adds scanning of `kubernetes_manifest` and typed `kubernetes_*` resources in Terraform files. • Introduces a native GCP Artifact Registry vulnerability adaptor (Container Image Vulnerability, Phase 2). • Introduces a Container Image Vulnerability (CIV) adaptor for Azure Container Registry. • Adds Azure AKS support to `ListEntitiesForPolicies` resource mapping. • Implements Runtime Profile Drift Detection and Remediation (KS-ADV-01). • Implements a concurrent and deduplicated image scan pipeline (KS-ADV-02) to improve throughput. • Adds automated in-cluster private registry credential resolver for image scans. • Adds fallback support for OpenShift external registry routes. • Adds support for scoped registry auth for image scans. • Adds resource streaming for large clusters (feat(streaming)) to reduce memory usage during scans. • Optimizes host-sensor queries with paging, rate limits, and caching. • Supports configurable workload kinds and dynamic pod template spec detection in resource prioritization. • Surfaces current field values alongside failed paths in scan output (HTML and printer). • CEL findings now carry the same remediation paths as their Rego equivalents. • Cloud exceptions are now preferred over CRD exceptions (feat(exceptions)). • Switches Rego evaluation to RegoV1, dropping the v0 compatibility shim. • Unifies scan stdin input handling for consistent behavior across scan commands. • Adds `ParseDurationEnvVar` for duration-based environment variable configuration. Breaking changes: • Rego policies are now evaluated with RegoV1 only — the v0 compatibility shim has been removed. Policies relying on v0 Rego syntax will break. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v4.0.11 https://github.com/kubescape/kubescape/releases/tag/v4.0.11 Wed, 22 Jul 2026 14:31:59 GMT Kubescape v4.0.11 adds GitLab SAST output, quarantine remediation, AWS ECR vuln adaptor, CEL controls scanning, and OCI/local patch exports • Adds `gitlab-sast` as a new `--format` output option via `feat(printer): add GitLab SAST report output format`, enabling native GitLab Security Dashboard integration. • Adds `quarantine` action to the `kubescape operator remediate` CLI subcommand for isolating non-compliant workloads. • Adds OCI and local export targets to `kubescape patch`, expanding patched image delivery options beyond remote registries. • Runs CEL-based admission controls as part of `kubescape scan`, bundling and evaluating the VAP CEL policy suite without a network call. • Implements an AWS ECR vulnerability adaptor via the new Container Image Vulnerability (CIV) Adaptor interface, enabling ECR-native image vulnerability data ingestion. • Adds decryption support for encrypted resource metadata (report crypto), complementing the existing encryption path. • Adds headless OPAProcessor for low-latency Network Policy scanning in the MCP server. • Adds headless OPAProcessor RBAC scanner to the MCP server. • Adds container profile tools and resources to the MCP server. • Supports reversible container metadata transformation in the anonymizer (`feat(anonymizer): support reversible container metadata transformation`). • Honors `objectSelector.matchExpressions` in `PostureExceptionPolicy.ObjectSelector`, enabling expression-based exception scoping. • The `vap deploy-library` subcommand now serves the embedded VAP bundle by default; network download only occurs when `--from-release` is passed. Breaking changes: • The `vap deploy-library` subcommand no longer downloads the VAP bundle from the network by default — it serves the embedded bundle instead. Pass `--from-release` to restore the previous download behaviour. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v4.0.9 https://github.com/kubescape/kubescape/releases/tag/v4.0.9 Fri, 29 May 2026 06:59:42 GMT kubescape v4.0.9 adds SecurityException event emission, VAP enforcement reconcile, and failure surface for partial GVR collections • `SecurityException` events are now emitted when posture exception matches occur, allowing downstream auditing of exceptional posture states. • Partial Group/Version/Resource (GVR) collection failures are surfaced instead of being silently suppressed, enabling visibility into scanning gaps. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v4.0.8 https://github.com/kubescape/kubescape/releases/tag/v4.0.8 Fri, 08 May 2026 17:08:58 GMT Adds `--timeout` flag to `kubescape deploy-library` command to control deployment wait time. • `deploy-library` accepts a new `--timeout` flag (new) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v4.0.7 https://github.com/kubescape/kubescape/releases/tag/v4.0.7 Fri, 08 May 2026 12:02:34 GMT kubescape v4.0.7 adds ControlInput CRD, TLS env var support, and expired exception filtering • Adds `ControlInput` CRD for in-cluster control configuration via `kubectl apply`. • Enables TLS key configuration for the HTTP handler using `KUBESCAPE_TLS_KEY` and `KUBESCAPE_TLS_CERT` environment variables. • Filters expired exceptions from results before they are applied during scanning. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v4.0.6 https://github.com/kubescape/kubescape/releases/tag/v4.0.6 Mon, 04 May 2026 14:18:13 GMT Adds `--helm-values-overrides` to `kubescape scan` for custom Helm values and enables Kustomize-Helm rendering • `--helm-values-overrides` flag on `kubescape scan` accepts a JSON string of Helm values to override during local cluster scans • Enables automatic detection and rendering of Kustomize directories that include `helmCharts` blocks, allowing mixed manifests to be scanned without manual conversion Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v4.0.3 https://github.com/kubescape/kubescape/releases/tag/v4.0.3 Tue, 17 Mar 2026 15:44:52 GMT kubescape v4.0.3 adds the --grype-db-url flag to override the Grype database URL for container image scans. • Adds `--grype-db-url` flag to `kubescape scan` to allow overloading the Grype vulnerability database URL. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v4.0.0 https://github.com/kubescape/kubescape/releases/tag/v4.0.0 Wed, 04 Feb 2026 16:59:51 GMT kubescape v4.0.0 introduces a krew plugin manifest, a verbose flag for scan-images, and an image column in vulnerability table output. • Adds `--verbose` flag to the `scan-images` command to show detailed output • Adds an image column to the vulnerability scanning table output Breaking changes: • Replaces the `host sensor` with a `node agent` for cluster sensing, changing the underlying component used for host-level data collection. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v3.0.48 https://github.com/kubescape/kubescape/releases/tag/v3.0.48 Thu, 22 Jan 2026 20:55:32 GMT Adds `--labels-to-copy` flag to copy workload labels into scan reports • `--labels-to-copy` flag to copy workload labels into scan reports Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v3.0.47 https://github.com/kubescape/kubescape/releases/tag/v3.0.47 Mon, 15 Dec 2025 08:01:18 GMT kubescape v3.0.47 adds --skip-persistence flag and debug listing with adjusted JUnit report options • Adds `--skip-persistence` CLI flag to skip persistence-related scanning logic • Adds debug listing capability for enhanced troubleshooting visibility • Adjusts JUnit report output options to improve CI/CD integration flexibility Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v3.0.46 https://github.com/kubescape/kubescape/releases/tag/v3.0.46 Fri, 05 Dec 2025 10:29:09 GMT kubescape v3.0.46 adds `severity` field to JSON output and fixes metrics export • Adds the `severity` field to controls in JSON output for granular result inspection Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v3.0.40 https://github.com/kubescape/kubescape/releases/tag/v3.0.40 Tue, 02 Sep 2025 13:53:53 GMT kubescape v3.0.40 adds default matchers for image scanning and fixes remediation display • Adds `--default-matchers` flag to image scanning commands to apply matcher defaults • Improves Assisted Remediation output to include the container name in the results Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v3.0.35 https://github.com/kubescape/kubescape/releases/tag/v3.0.35 Mon, 07 Jul 2025 06:10:46 GMT Adds `mcpserver` subcommand to expose Kubescape capabilities via MCP protocol • Adds `mcpserver` subcommand to start an Model Context Protocol server for tool integration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v3.0.33 https://github.com/kubescape/kubescape/releases/tag/v3.0.33 Mon, 24 Mar 2025 12:31:47 GMT kubescape v3.0.33 adds review-values support to the prerequisites UI • Enhances the prerequisites UI with new `review-values` functionality and improved PR handling Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v3.0.27 https://github.com/kubescape/kubescape/releases/tag/v3.0.27 Tue, 11 Feb 2025 09:35:39 GMT kubescape v3.0.27 adds the `--exceptions` flag to the scan image CLI command and exception rule support in the Scan API. • Adds `--exceptions` flag to the `scan image` subcommand to exclude specific findings during container image scanning • Extends the Scan API to accept exception rules via HTTP request body, allowing programmatic exclusion of findings Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v3.0.23 https://github.com/kubescape/kubescape/releases/tag/v3.0.23 Thu, 09 Jan 2025 16:11:33 GMT Adds airgap support and trigger-by-indication in posture reports • Introduces `airgap` support for offline scanning scenarios • Adds trigger by indication in posture report output Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v3.0.22 https://github.com/kubescape/kubescape/releases/tag/v3.0.22 Wed, 11 Dec 2024 09:18:51 GMT Adds capability to print rego policy 'print' statements for debugging • Adds support for printing rego policy `print` statements Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v3.0.12 https://github.com/kubescape/kubescape/releases/tag/v3.0.12 Wed, 03 Jul 2024 12:55:46 GMT Adds helper functions for VAP and CEL admission library • `AddVapHelper` and `AddCelHelper` in the VAP/CEL admission library Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v3.0.9 https://github.com/kubescape/kubescape/releases/tag/v3.0.9 Wed, 01 May 2024 08:17:10 GMT kubescape v3.0.9 now includes control IDs in PDF reports • Adds control id to pdf output Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v3.0.5 https://github.com/kubescape/kubescape/releases/tag/v3.0.5 Wed, 13 Mar 2024 14:00:31 GMT Adds `riscv` build target and environment variables `BuildNumber`, `Client` for self-hosted gitlab support • Adds a `riscv` build target to the release assets, enabling installation on RISC-V architectures. • Reads the new `BuildNumber` and `Client` environment variables to populate scan metadata. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v3.0.4 https://github.com/kubescape/kubescape/releases/tag/v3.0.4 Fri, 01 Mar 2024 14:02:29 GMT kubescape v3.0.4 adds debugging for Helm chart scanning and vulnerability details to scan summaries • Adds debugging ability for scanning Helm charts • Includes Vulnerability scanning report in the summaryDetails section Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v3.0.1 https://github.com/kubescape/kubescape/releases/tag/v3.0.1 Wed, 01 Nov 2023 14:34:10 GMT Kubescape v3.0 adds image vulnerability scanning, experimental patching, and operator-triggered scans • Adds `kubescape scan image` command to scan container images for potential vulnerabilities • Adds `kubescape patch image` command (experimental) to reduce vulnerabilities in container images • Adds `kubescape operator scan configurations` subcommand to trigger configuration scans via the Kubescape-Operator • Adds `kubescape operator scan vulnerabilities` subcommand to trigger vulnerability scans via the Kubescape-Operator Breaking changes: • Kubescape is now independent from ARMO Platform and removes all direct or indirect dependencies on it. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v3.0.0 https://github.com/kubescape/kubescape/releases/tag/v3.0.0 Sun, 22 Oct 2023 17:31:19 GMT Kubescape v3 introduces `scan image`, `patch image`, and `operator scan` subcommands for container security. • Adds the `kubescape scan image <image>` CLI subcommand to scan container images for vulnerabilities • Adds the experimental `kubescape patch image <image>` CLI subcommand to patch vulnerabilities in container images • Adds `kubescape operator scan configurations` and `kubescape operator scan vulnerabilities` CLI subcommands to trigger scans via the Kubescape-Operator Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v2.0.183 https://github.com/kubescape/kubescape/releases/tag/v2.0.183 Fri, 13 Jan 2023 13:43:02 GMT kubescape v2.0.183 adds `kubescape fix`, Azure and Bitbucket remote scanning, and a `--create-account` flag. • Support for scanning Azure remote repositories in `kubescape scan` • Support for scanning Bitbucket repositories in `kubescape scan` • New `--create-account` flag to submit data to the ARMO platform without pre-registration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v2.0.180 https://github.com/kubescape/kubescape/releases/tag/v2.0.180 Tue, 03 Jan 2023 09:51:50 GMT Alpha support for prioritizing failed resources by attack vector via --print-attack-tree • Adds `--print-attack-tree` flag to enable prioritizing failed resources based on attack vectors Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v2.0.179 https://github.com/kubescape/kubescape/releases/tag/v2.0.179 Thu, 22 Dec 2022 16:27:29 GMT Adds GitLab remote repository scanning and multi-format/multiple-file output to `kubescape scan` • Allows specifying the `GITLAB_TOKEN` environment variable to authenticate scanning of private gitlab repositories Breaking changes: • `kubescape scan control` now requires control IDs instead of control names; scanning by name is deprecated and will stop working. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v2.0.175 https://github.com/kubescape/kubescape/releases/tag/v2.0.175 Sun, 06 Nov 2022 14:00:25 GMT kubescape v2.0.175 adds `kubescape update` command and GCP registry support • Adds `kubescape update` command for updating the Kubescape binary (beta) • Supports GCP image registry integration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v2.0.171 https://github.com/kubescape/kubescape/releases/tag/v2.0.171 Mon, 19 Sep 2022 05:41:53 GMT v2.0.171 adds `--cluster-name` CLI flag and severity-based fail thresholds for CI gating • Adds `--cluster-name=<name>` flag to the Kubescape CLI to manually specify the cluster name for scanning reports • Adds option to fail the Kubescape process based on the number of severities found, enabling stricter CI gate criteria Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v2.0.160 https://github.com/kubescape/kubescape/releases/tag/v2.0.160 Thu, 30 Jun 2022 17:37:06 GMT New repository scanning capability and HTML output format for kubescape • Adds `html` to the list of supported output formats • Adds `-v` flag to install.sh to specify a release version Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v2.0.159 https://github.com/kubescape/kubescape/releases/tag/v2.0.159 Thu, 30 Jun 2022 12:21:57 GMT kubescape v2.0.159 adds repository scanning support and HTML output format • `./install.sh -v <version>` now accepts a specific version argument to install that exact release instead of the latest • Adds `--format html` (implied by new output support) to export scan results as an HTML file for sharing with non-technical stakeholders Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v2.0.152 https://github.com/kubescape/kubescape/releases/tag/v2.0.152 Mon, 11 Apr 2022 14:20:33 GMT kubescape v2.0.152 adds GKE support, Prometheus integration (beta), severity column, and CLI output updates. • Adds `GKE support` for scanning Google Kubernetes Engine clusters • Adds prometheus (beta support) via the HTTP handler example at `httphandler/examples/prometheus` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v2.0.149 https://github.com/kubescape/kubescape/releases/tag/v2.0.149 Sun, 06 Mar 2022 09:52:14 GMT Adds `--format-version` for JSON v2, PDF output, host scanner YAML customization, and autocompletion • Adds `--format-version` flag to support Format v2 (JSON, pretty-printer) output • Adds PDF support for scan results export • Adds autocompletion support for shells • Adds `--host-scan-yaml` flag to customize the host scanner DaemonSet Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v2.0.148 https://github.com/kubescape/kubescape/releases/tag/v2.0.148 Sun, 20 Feb 2022 19:33:58 GMT kubescape v2.0.148 adds KS_LOGGER_NAME and --cache-dir • Support zap logger via `KS_LOGGER_NAME` environment variable • Specify cache directory location using `--cache-dir` flag or `KS_CACHE_DIR` env var Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v1.0.136 https://github.com/kubescape/kubescape/releases/tag/v1.0.136 Wed, 22 Dec 2021 19:17:09 GMT Adds host-sensor controls support to Kubescape scanning capabilities • Supports host-sensor controls in scan operations • Supports cloud configurations controls in scan operations • Results now include URLs for control details Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape https://github.com/kubescape/kubescape/releases/tag/v1.0.133 https://github.com/kubescape/kubescape/releases/tag/v1.0.133 Sun, 12 Dec 2021 16:06:37 GMT Adds `--verbose` flag to kubescape CLI • `--verbose` flag available for detailed output in the CLI Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kubescape