Choose the configuration type and run the static rules. Findings need context and do not replace deployment tests or organization-specific policy checks.
Runs locally in your browserThe rules are intentionally conservative. Review every finding against the image, cluster policy, workflow permissions, and environment you actually use.
This local ruleset looks for common practical mistakes, not full policy compliance. Use it alongside image scanning, admission controls, CI policy checks, and your organization’s security review.