Lint copied DevOps configuration for risky defaults, missing hardening controls, unpinned actions or images, and operational gaps before deployment.
The rules are intentionally conservative. Review every finding against the image, cluster policy, workflow permissions, and environment you actually use.
This local ruleset looks for common practical mistakes, not full policy compliance. Use it alongside image scanning, admission controls, CI policy checks, and your organization’s security review.