<p>Is there any other alternative of <code>kube-bench</code> for ocp4.3 regarding cis benchmark or any replacement of <code>kube-bench</code> for using cis benchmark. I need a security tool that can check all the vulnerabilities in kubernetes cluster not only image scanning and configuration.</p>

user13423405
<p><a href="https://github.com/inspec/inspec" rel="nofollow noreferrer">Inspec</a> is recommended from Docker for running <a href="https://github.com/dev-sec/cis-kubernetes-benchmark" rel="nofollow noreferrer">CIS Kubernetes benchmark</a>. </p>

<blockquote>
  <p>Note: The above <code>Inspec</code> implementation provides - the CIS Kubernetes 1.5.0 Benchmark.</p>
</blockquote>

<p>Also, <a href="https://github.com/Shopify/kubeaudit" rel="nofollow noreferrer">kubeaudit</a> might be of use - but I don't see specific CIS benchmark extension.</p>
