https://blog.landryzetam.net/tags/kubescape/Recent content in Kubescape on Landry Zetam - Tech BlogHugo -- gohugo.ioen-usFri, 19 Dec 2025 00:00:00 +0000https://blog.landryzetam.net/posts/kubernetes-security-pipeline-kubebench-kubescape/Fri, 19 Dec 2025 00:00:00 +0000https://blog.landryzetam.net/posts/kubernetes-security-pipeline-kubebench-kubescape/<p>What if your Kubernetes cluster could write comprehensive security reports directly into your second brain every night? Not just one perspective, but two complementary views: infrastructure security <em>and</em> workload security. I built exactly that—a pipeline combining kube-bench (CIS benchmarks) and kubescape (NSA/MITRE frameworks) that publishes human-readable reports to Obsidian automatically. Here&rsquo;s how the complete system works.</p> <hr> <h2 id="part-1-why-you-need-both-tools">Part 1: Why You Need Both Tools</h2> <h3 id="the-security-visibility-gap">The Security Visibility Gap</h3> <p>Running a Kubernetes homelab means wearing many hats. Security scanning tools exist, but most people either:</p>