KubeLinter checks Kubernetes YAML files, Helm charts, and Kustomize
manifests for security and production-readiness best practices.

Building requires google-go-lang (Go 1.25.5 or newer). The supplied
vendor archive allows offline compilation. Go is not needed at runtime.

Run "kube-linter lint /path/to/manifests" as your normal user. Local
manifest checks do not require a running Kubernetes cluster. Lint
findings produce a nonzero exit status.

An example configuration and generated check/template documentation are
included in /usr/doc/kube-linter-<version>/. Use --config to select your
configuration. The optional kubeconform check may fetch remote schemas;
this is separate from offline compilation and ordinary local checks.

Documentation: https://docs.kubelinter.io/