DeployGuard CLI 🛡️

Kubernetes manifest scanner and deployment validator

Part of the DeployGuard.dev ecosystem - helping teams ship safer deployments.

Scan your Kubernetes deployments for security issues, missing best practices, and configuration problems. Get a 0-100 risk score with actionable recommendations.

Installation

npm install -g deployguard-cli

Usage

# Scan a deployment manifest
deployguard scan deployment.yaml

# Also available as k8guard
k8guard scan deployment.yaml

# Scan with verbose output
deployguard scan deployment.yaml --verbose

What DeployGuard CLI Checks

✅ Health Probes - Readiness and liveness probes
✅ Resource Management - CPU/memory limits and requests
✅ High Availability - Replica count
✅ Security - Non-root containers
✅ Best Practices - Image tags, pull policies

Example Output

🔍 K8Guard - Kubernetes Deployment Scanner

❌ CRITICAL ISSUES:
  • No readinessProbe defined - can cause failed requests during rollout

⚠️  WARNINGS:
  • Using :latest or untagged image - deployments may be unpredictable
  • No resource limits - pod can consume unlimited CPU/memory

✅ PASSED CHECKS:
  • Liveness probe configured
  • 2 replicas configured (high availability)

📊 DEPLOYMENT SCORE:
  65/100 (MEDIUM RISK)

💡 RECOMMENDATIONS:
  1. Add readinessProbe to ensure zero-downtime deployments
  2. Pin image to specific version (e.g., myapp:v1.2.3)
  3. Set resource limits to prevent resource exhaustion

Deployment Score Ranges

• 80-100: Low Risk ✅ (Production ready)
• 60-79: Medium Risk ⚠️ (Improvements recommended)
• 0-59: High Risk ❌ (Critical issues found)

DeployGuard Ecosystem

This CLI is part of the DeployGuard suite:

• DeployGuard.dev - CI/CD intelligence platform
• DeployGuard CLI - K8s manifest scanner (this tool)
• DeployGuard GitHub App - Risk scoring for every push

Roadmap

• [ ] Support for Services, ConfigMaps, Secrets
• [ ] JSON output for CI/CD integration
• [ ] Custom rule configuration
• [ ] GitHub Actions integration
• [ ] DeployGuard.dev platform integration
• [ ] Web API for bulk scanning

Built With

• Node.js + Commander.js
• YAML parsing
• Kubernetes best practices

About

Built by Raja Karuppasamy as part of the 30-day Kubernetes mastery sprint.

Part of ClearFix.co - B2B DevOps tooling for solo founders.

License

MIT