kube-bench Kubernetes, CI & IaC

docker pull ghcr.io/rtvkiz/minimal-kube-bench:latest-dev

The -dev variant adds a shell, package manager and build toolchain. For CI and debugging — not production.

Entrypoint

/usr/bin/kube-bench

User

nonroot (65532)

Working dir

/workspace

Architectures

x86_64, aarch64

Environment

PATH=/usr/bin:/binHOME=/tmp

Labels

org.opencontainers.image.title	minimal-kube-bench
org.opencontainers.image.description	Hardened shell-less kube-bench CIS Kubernetes benchmark checker built from source (built from source via melange, daily CVE patches)
org.opencontainers.image.url	https://github.com/rtvkiz/minimal
org.opencontainers.image.source	https://github.com/rtvkiz/minimal/tree/main/kube-bench
org.opencontainers.image.licenses	Apache-2.0

Entrypoint

/usr/bin/kube-bench

User

nonroot (65532)

Working dir

/workspace

Architectures

x86_64, aarch64

Environment

PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/binHOME=/tmp

Labels

org.opencontainers.image.title	minimal-kube-bench-dev
org.opencontainers.image.description	Dev variant of minimal-kube-bench: same kube-bench + shell + curl/openssl/jq/git. Not for production.
org.opencontainers.image.url	https://github.com/rtvkiz/minimal
org.opencontainers.image.source	https://github.com/rtvkiz/minimal/tree/main/kube-bench
org.opencontainers.image.licenses	Apache-2.0
dev.minimal.variant	dev