v0.1 - Security Awareness Tool (Beta)

First public beta release of opscart-k8s-watcher - a Kubernetes security awareness and troubleshooting tool.

Important Disclaimer

This is a security awareness tool - NOT for:

• Compliance auditing (use kube-bench)
• Financial decision-making
• Production security decisions without professional review

What it IS for:

• Quick security posture checks
• War room troubleshooting
• Resource optimization opportunities
• Trend tracking across environments

What's New in v0.1

Security Scanning

• CIS Kubernetes Benchmark v1.8 scoring - Covers 7 pod security controls with weighted scoring
• Environment-aware analysis - Automatically detects PRODUCTION, STAGING, DEVELOPMENT, and SYSTEM namespaces
• Top 5 specific resources - Shows exactly which pods/containers have issues
• Actionable recommendations - Direct kubectl commands and remediation steps

Transparency Improvements

• Removed unvalidated financial risk calculations - No more fake probabilities, ROI projections, or made-up breach costs
• Industry-cited benchmarks - Spot instance savings based on AWS/GCP/Azure published rates (~70-90%)
• Clear disclaimers - Honest about tool limitations
• Issue count validation - Transparent breakdown showing all detected issues

Quick Start

# Clone and build
git clone https://github.com/opscart/opscart-k8s-watcher.git
cd opscart-k8s-watcher
go build -o opscart-scan cmd/opscart-scan/main.go

# Run security scan
./opscart-scan security --cluster your-cluster

# Emergency scanner (war room)
./opscart-scan emergency --cluster your-cluster

# Resource analysis
./opscart-scan resources --cluster your-cluster