Popeye Integration with DefectDojo
Popeye is an open-source Kubernetes cluster sanitizer that scans live Kubernetes clusters to detect misconfigurations, stale resources, and policy violations by analyzing deployed workloads against best practices including resource utilization metrics, RBAC rules, container configurations, network policies, and security settings to identify issues such as port mismatches, unused resources, missing probes, naked pods, and capacity warnings. The read-only tool integrates into workflows as a standalone CLI, Docker container, or CronJob within clusters to provide comprehensive linting reports with severity-rated findings and a Popeye Score, enabling operators and DevOps teams to maintain healthy, secure, and optimized Kubernetes deployments while reducing cognitive overhead in managing complex cluster configurations.
Data Granularity: What Gets Imported
The following fields are captured from Popeye results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "Popeye",
"engagement": "<engagement-id>",
"file": "results.json"
}