Example: Kubernetes scanning with defsec

main.go

package main

import (
	"context"
	"fmt"
	"os"
	"strings"

	"github.com/aquasecurity/defsec/pkg/scanners/kubernetes"
)

func main() {
	results, err := kubernetes.NewScanner().ScanReader(context.TODO(), "k8s.yml", strings.NewReader(`
apiVersion: v1
kind: Pod
metadata:
  name: hello-cpu-limit
spec:
  containers:
  - command: ["sh", "-c", "echo 'Hello' && sleep 1h"]
    image: busybox
    name: hello
    `))
	if err != nil {
		panic(err)
	}

	if len(results.GetFailed()) == 0 {
		fmt.Println("AOK")
		os.Exit(0)
	}

	for _, result := range results.GetFailed() {
		fmt.Printf("%#v\n\n", result)
	}
	os.Exit(1)
}