kube-bench Integration with DefectDojo
kube-bench is an open-source Kubernetes security auditing tool by Aqua Security that checks whether Kubernetes clusters are deployed securely by running automated compliance checks against the CIS Kubernetes Benchmark to identify misconfigurations and security weaknesses in cluster components including API servers, controller managers, schedulers, etcd, kubelets, and network policies. The tool executes comprehensive security assessments using YAML-configured tests that can be run as Kubernetes jobs, standalone containers, or command-line applications to verify adherence to security best practices, providing detailed pass/fail results with remediation guidance to help organizations harden their Kubernetes infrastructure across master nodes, worker nodes, and control plane components.
Data Granularity: What Gets Imported
The following fields are captured from kube-bench results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "kube-bench",
"engagement": "<engagement-id>",
"file": "results.json"
}