gitops-repo-audit

Audit Flux CD GitOps repositories by scanning local YAML manifests to validate Kubernetes schema correctness, detect deprecated Flux API versions, and identify RBAC and multi-tenancy security gaps. The process produces a prioritized report with actionable remediation recommendations.

Validate Kubernetes manifests locally by checking YAML files against bundled OpenAPI schemas to ensure resource correctness. This discovery and validation phase inventories resources and confirms manifest validity prior to deployment.

The GitOps audit applies its validation and security review workflow to both monorepo and multi-repo Flux CD patterns. It analyzes local YAML manifests consistently across different repository structures to generate a unified prioritized report.

Checking Flux CD deprecations and RBAC configurations locally requires flux, git, yq, kustomize, kubeconform, and awk. These dependencies drive the discovery, schema validation, and best-practice assessment phases.

Generate a prioritized remediation report by running a comprehensive security review and best-practice assessment on local GitOps manifests. The resulting output highlights secret handling gaps and RBAC concerns with auditable remediation recommendations.

Scanning local YAML manifests for Flux CD schema validity identifies deprecated API versions and configuration issues before deployment. This pre-deployment validation prevents cluster failures and ensures consistent remediation guidance.