rrskris

rrskris/Argus

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

1 stars 0 forks 1 watchers Python Apache License 2.0
cis-benchmark cloud-native devsecops k8s-security kubernetes kubernetes-security kyverno rbac security security-tools vulnerability-scanner
View on GitHub Website
8 Open Issues Need Help Last updated: Jul 7, 2026

Open Issues Need Help

View All on GitHub
Add SARIF output to the CLI (GitHub Security tab) about 4 hours ago
enhancement good first issue area/cli
rrskris/Argus
1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python
#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner
Add JUnit XML output to the CLI (GitLab/Jenkins) about 4 hours ago
enhancement good first issue area/cli
rrskris/Argus
1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python
#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner
Write a real Helm chart about 4 hours ago
enhancement help wanted area/deploy
rrskris/Argus
1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python
#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner
New RBAC rule: unnecessary SA token automount (CIS 5.1.6) about 4 hours ago
good first issue rule-request area/rbac
rrskris/Argus
1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python
#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner
Implement Grype report ingestion about 4 hours ago
enhancement help wanted area/ingest
rrskris/Argus
1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python
#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner
Implement Trivy report ingestion about 4 hours ago
enhancement help wanted area/ingest
rrskris/Argus
1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python
#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner
Add GET /rbac/scan/diff (alert on new findings only) about 4 hours ago
enhancement help wanted area/api
rrskris/Argus
1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python
#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner
Expose a Prometheus /metrics endpoint about 4 hours ago
enhancement help wanted area/observability
rrskris/Argus
1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python
#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner