Comprueba Dockerfiles, flujos de GitHub Actions y manifiestos Kubernetes para detectar imágenes no fijadas, permisos amplios, configuraciones privilegiadas y controles de ejecución ausentes.
The rules are intentionally conservative. Review every finding against the image, cluster policy, workflow permissions, and environment you actually use.
This local ruleset looks for common practical mistakes, not full policy compliance. Use it alongside image scanning, admission controls, CI policy checks, and your organization’s security review.