Kubeaudit Scan

Kubeaudit is a command line tool and a Go package to audit Kubernetes clusters for various different security concerns. The output of Kubeaudit which is supported within this parser is JSON. The tool can be found here.

Sample Scan Data

Sample Kubeaudit scans can be found here.

Default Deduplication Hashcode Fields

By default, DefectDojo identifies duplicate Findings using these hashcode fields:

• title
• cwe
• line
• file path
• description