PackageTrack
Sign in Get early access

github.com/quarkslab/kdigger

v1.5.1 #2723 most downloaded on Go modules quarkslab/kdigger

What this package is like to depend on

Last release 9 months ago

07 Nov 2025

Ships unpredictably

gaps range from 1 weeks to 1.6 years

Nearly every release is documented

notes for 8 of 8 stable releases

Nothing withdrawn

no release was ever pulled

5 years old

27 releases · first in 2021

1 release in the last 12 months

see the full history below

Release timeline

27 releases · Oct 2021 to Nov 2025
2022 2023 2024 2025 2026
Release Pre-release

Releases

latest 27
  1. v1.5.2-0.20251107114446-41f5e70fe7ea 07 Nov 2025 pre-release

    Nothing published for this version

  2. v1.5.1 18 Jun 2024
    Release notes

    Changelog
    See the changelog for the new features and modifications of this patch version!

    Installation instructions
    These commands download the compressed binary, extract it, download sha256 and check file integrity, add execution rights on the binary, install the binary in /usr/local/bin, and finally run the binary to display the default help message.

    tl;dr

    curl -L https://github.com/quarkslab/kdigger/releases/download/v1.5.1/kdigger-linux-amd64 --output /usr/local/bin/kdigger
chmod +x /usr/local/bin/kdigger

    Linux amd64

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.5.1/kdigger-linux-amd64.tar.gz" | tar -xz \
&& curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.5.1/kdigger-linux-amd64.sha256" | sha256sum --quiet -c - \
&& chmod a+x kdigger-linux-amd64 \
&& sudo mv kdigger-linux-amd64 /usr/local/bin/kdigger \
&& kdigger

    Linux arm64

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.5.1/kdigger-linux-arm64.tar.gz" | tar -xz \
&& curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.5.1/kdigger-linux-arm64.sha256" | sha256sum --quiet -c - \
&& chmod a+x kdigger-linux-arm64 \
&& sudo mv kdigger-linux-arm64 /usr/local/bin/kdigger \
&& kdigger

    macOS amd64

    To use sha256sum on macOS, you will have to install coreutils package with brew install coreutils before.

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.5.1/kdigger-darwin-amd64.tar.gz" | tar -xz \
&& curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.5.1/kdigger-darwin-amd64.sha256" | sha256sum --quiet -c - \
&& chmod a+x kdigger-darwin-amd64 \
&& sudo mv kdigger-darwin-amd64 /usr/local/bin/kdigger \
&& kdigger

    Or just don't verify the hash.

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.5.1/kdigger-darwin-amd64.tar.gz" | tar -xz \
&& chmod a+x kdigger-darwin-amd64 \
&& sudo mv kdigger-darwin-amd64 /usr/local/bin/kdigger \
&& kdigger

    macOS arm64

    To use sha256sum on macOS, you will have to install coreutils package with brew install coreutils before.

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.5.1/kdigger-darwin-arm64.tar.gz" | tar -xz \
&& curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.5.1/kdigger-darwin-arm64.sha256" | sha256sum --quiet -c - \
&& chmod a+x kdigger-darwin-arm64 \
&& sudo mv kdigger-darwin-arm64 /usr/local/bin/kdigger \
&& kdigger

    Or just don't verify the hash.

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.5.1/kdigger-darwin-arm64.tar.gz" | tar -xz \
&& chmod a+x kdigger-darwin-arm64 \
&& sudo mv kdigger-darwin-arm64 /usr/local/bin/kdigger \
&& kdigger
    Open source →
    Release notes

    Added

    • Release darwin arm64 builds as requested per issue 13.

    Changed

    • Updates all deps and linters (bumped to k8s v1.30).
    Open source →
    Release notes

    v1.5.1 Latest

    Latest

    Compare

    Choose a tag to compare

    Open source →
  3. v1.5.1-0.20240618100753-7f854977ae26 18 Jun 2024 pre-release

    Nothing published for this version

  4. v1.5.1-0.20221025163834-6b6f01c4d7e5 25 Oct 2022 pre-release

    Nothing published for this version

  5. v1.5.0 25 Oct 2022
    Release notes

    Changelog
    See the changelog for the new features and modifications of this minor version!

    Installation instructions
    These commands download the compressed binary, extract it, download sha256 and check file integrity, add execution rights on the binary, install the binary in /usr/local/bin, and finally run the binary to display the default help message.

    tl;dr

    curl -L https://github.com/quarkslab/kdigger/releases/download/v1.5.0/kdigger-linux-amd64 --output /usr/local/bin/kdigger
chmod +x /usr/local/bin/kdigger

    Linux amd64

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.5.0/kdigger-linux-amd64.tar.gz" | tar -xz \
&& curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.5.0/kdigger-linux-amd64.sha256" | sha256sum --quiet -c - \
&& chmod a+x kdigger-linux-amd64 \
&& sudo mv kdigger-linux-amd64 /usr/local/bin/kdigger \
&& kdigger

    Linux arm64

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.5.0/kdigger-linux-arm64.tar.gz" | tar -xz \
&& curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.5.0/kdigger-linux-arm64.sha256" | sha256sum --quiet -c - \
&& chmod a+x kdigger-linux-arm64 \
&& sudo mv kdigger-linux-arm64 /usr/local/bin/kdigger \
&& kdigger

    macOS amd64

    To use sha256sum on macOS, you will have to install coreutils package with brew install coreutils before.

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.5.0/kdigger-darwin-amd64.tar.gz" | tar -xz \
&& curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.5.0/kdigger-darwin-amd64.sha256" | sha256sum --quiet -c - \
&& chmod a+x kdigger-darwin-amd64 \
&& sudo mv kdigger-darwin-amd64 /usr/local/bin/kdigger \
&& kdigger

    Or just don't verify the hash.

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.5.0/kdigger-darwin-amd64.tar.gz" | tar -xz \
&& chmod a+x kdigger-darwin-amd64 \
&& sudo mv kdigger-darwin-amd64 /usr/local/bin/kdigger \
&& kdigger
    Open source →
    Release notes

    Added

    • Added a structured fuzzing feature to fuzz the admission control of the k8s API. The idea came from issue 10. And was implemented in PR 11 thanks to google/gofuzz.
    • It is now possible to add a --namespace flag to kdigger gen command thanks to @kranurag7.

    Changed

    • Use server side dry run by default on admission control scan. Added a flag --admission-create to replicate the old behavior but the scan now by default run with --dry-run=server so no cleaning is needed. Shoutout to @smarticu5 for the idea at KubeHuddle 2022!
    Open source →
    Release notes

    v1.5.0

    Compare

    Choose a tag to compare

    Open source →
  6. v1.4.1-0.20221013153547-39ed562c1ba8 13 Oct 2022 pre-release

    Nothing published for this version

  7. v1.4.1-0.20221010151325-9b4744826afb 10 Oct 2022 pre-release

    Nothing published for this version

  8. v1.4.0 30 Sep 2022
    Release notes

    Changelog
    See the changelog for the new features and modifications of this minor version!

    Installation instructions
    These commands download the compressed binary, extract it, download sha256 and check file integrity, add execution rights on the binary, install the binary in /usr/local/bin, and finally run the binary to display the default help message.

    tl;dr

    curl -L https://github.com/quarkslab/kdigger/releases/download/v1.4.0/kdigger-linux-amd64 --output /usr/local/bin/kdigger
chmod +x /usr/local/bin/kdigger

    Linux amd64

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.4.0/kdigger-linux-amd64.tar.gz" | tar -xz \
&& curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.4.0/kdigger-linux-amd64.sha256" | sha256sum --quiet -c - \
&& chmod a+x kdigger-linux-amd64 \
&& sudo mv kdigger-linux-amd64 /usr/local/bin/kdigger \
&& kdigger

    Linux arm64

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.4.0/kdigger-linux-arm64.tar.gz" | tar -xz \
&& curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.4.0/kdigger-linux-arm64.sha256" | sha256sum --quiet -c - \
&& chmod a+x kdigger-linux-arm64 \
&& sudo mv kdigger-linux-arm64 /usr/local/bin/kdigger \
&& kdigger

    macOS amd64

    To use sha256sum on macOS, you will have to install coreutils package with brew install coreutils before.

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.4.0/kdigger-darwin-amd64.tar.gz" | tar -xz \
&& curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.4.0/kdigger-darwin-amd64.sha256" | sha256sum --quiet -c - \
&& chmod a+x kdigger-darwin-amd64 \
&& sudo mv kdigger-darwin-amd64 /usr/local/bin/kdigger \
&& kdigger

    Or just don't verify the hash.

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.4.0/kdigger-darwin-amd64.tar.gz" | tar -xz \
&& chmod a+x kdigger-darwin-amd64 \
&& sudo mv kdigger-darwin-amd64 /usr/local/bin/kdigger \
&& kdigger
    Open source →
    Release notes

    Added

    • New plugin for basic container detection, result of this discussion on Twitter.
    • Add a linting configuration and linting in CI on GitHub.
    • Add the nixery.dev docker image build instructions in README.
    • Add a demo GIF in the README.

    Changed

    • Makefile is up to date with some new targets to setup dev env and the default build target runs without the linter.
    • Simplify and update the Vagrantfile.
    • Updated all dependencies and especially the Go client k8s to v0.25.2.
    • Made a lot of style modifications and minor fixes thanks to linting.

    Fixes

    • Fix the import of all auth providers for k8s Go client thanks to this user's PR.
    Open source →
    Release notes

    v1.4.0

    Compare

    Choose a tag to compare

    Open source →
  9. v1.3.1-0.20220930095156-65e6d758053e 30 Sep 2022 pre-release

    Nothing published for this version

  10. v1.3.1-0.20220916114904-774bf33d9f5d 16 Sep 2022 pre-release

    Nothing published for this version

  11. v1.3.1-0.20220915091158-60a1bfff3663 15 Sep 2022 pre-release

    Nothing published for this version

  12. v1.3.1-0.20220809151740-adf49cac0c54 09 Aug 2022 pre-release

    Nothing published for this version

  13. v1.3.1-0.20220725170555-e9d3bbe75488 25 Jul 2022 pre-release

    Nothing published for this version

  14. v1.3.1-0.20220717125735-af0b7bd9333d 17 Jul 2022 pre-release

    Nothing published for this version

  15. v1.3.0 12 Jul 2022
    Release notes

    Changelog
    See the changelog for the new features and modifications of this minor version!

    Installation instructions
    These commands download the compressed binary, extract it, download sha256 and check file integrity, add execution rights on the binary, install the binary in /usr/local/bin, and finally run the binary to display the default help message.

    Linux amd64

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.3.0/kdigger-linux-amd64.tar.gz" | tar -xz \
&& curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.3.0/kdigger-linux-amd64.sha256" | sha256sum --quiet -c - \
&& chmod a+x kdigger-linux-amd64 \
&& sudo mv kdigger-linux-amd64 /usr/local/bin/kdigger \
&& kdigger

    Linux arm64

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.3.0/kdigger-linux-arm64.tar.gz" | tar -xz \
&& curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.3.0/kdigger-linux-arm64.sha256" | sha256sum --quiet -c - \
&& chmod a+x kdigger-linux-arm64 \
&& sudo mv kdigger-linux-arm64 /usr/local/bin/kdigger \
&& kdigger

    macOS amd64

    To use sha256sum on macOS, you will have to install coreutils package with brew install coreutils before.

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.3.0/kdigger-darwin-amd64.tar.gz" | tar -xz \
&& curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.3.0/kdigger-darwin-amd64.sha256" | sha256sum --quiet -c - \
&& chmod a+x kdigger-darwin-amd64 \
&& sudo mv kdigger-darwin-amd64 /usr/local/bin/kdigger \
&& kdigger

    Or just don't verify the hash.

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.3.0/kdigger-darwin-amd64.tar.gz" | tar -xz \
&& chmod a+x kdigger-darwin-amd64 \
&& sudo mv kdigger-darwin-amd64 /usr/local/bin/kdigger \
&& kdigger
    Open source →
    Release notes

    Added

    • New level one command to generate template of pods with major security features disabled. It's mostly something that I needed while doing CTFs to not have some canonical YAML in a file somewhere to use, but being able to generate quickly those templates with random names, etc.
    • New plugin to scan the metadata endpoints in public cloud. I got this idea thanks to someone contributing to the security checklist on the Kubernetes documentation. It's basically public cloud fingerprinting via network.
    Open source →
    Release notes

    v1.3.0

    Compare

    Choose a tag to compare

    Open source →
  16. v1.2.2-0.20220621124217-c61ab3a51688 21 Jun 2022 pre-release

    Nothing published for this version

  17. v1.2.1 21 Jun 2022
    Release notes

    Changelog
    See the changelog for the new features and modifications of this patch version!

    Installation instructions
    These commands download the compressed binary, extract it, download sha256 and check file integrity, add execution rights on the binary, install the binary in /usr/local/bin, and finally run the binary to display the default help message.

    Linux amd64

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.2.1/kdigger-linux-amd64.tar.gz" | tar -xz \
&& curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.2.1/kdigger-linux-amd64.sha256" | sha256sum --quiet -c - \
&& chmod a+x kdigger-linux-amd64 \
&& sudo mv kdigger-linux-amd64 /usr/local/bin/kdigger \
&& kdigger

    Linux arm64

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.2.1/kdigger-linux-arm64.tar.gz" | tar -xz \
&& curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.2.1/kdigger-linux-arm64.sha256" | sha256sum --quiet -c - \
&& chmod a+x kdigger-linux-arm64 \
&& sudo mv kdigger-linux-arm64 /usr/local/bin/kdigger \
&& kdigger

    macOS amd64

    To use sha256sum on macOS, you will have to install coreutils package with brew install coreutils before.

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.2.1/kdigger-darwin-amd64.tar.gz" | tar -xz \
&& curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.2.1/kdigger-darwin-amd64.sha256" | sha256sum --quiet -c - \
&& chmod a+x kdigger-darwin-amd64 \
&& sudo mv kdigger-darwin-amd64 /usr/local/bin/kdigger \
&& kdigger

    Or just don't verify the hash.

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.2.1/kdigger-darwin-amd64.tar.gz" | tar -xz \
&& chmod a+x kdigger-darwin-amd64 \
&& sudo mv kdigger-darwin-amd64 /usr/local/bin/kdigger \
&& kdigger
    Open source →
    Release notes

    Added

    • New builds for macOS amd64 and Linux arm64. the macOS build is not really useful since kdigger is supposed to be run inside of pods, inside nodes, but it can be used to scan the admission control for example, or any remote plugins. However, Linux arm64 can be quite useful in case of arm64 node pools.
    • You can now install kdigger via Nix! Thanks to generous contributor @06kellyjac, see the PR on kdigger repo and in nixpkgs.

    Changed

    • Fixed minor bugs discovered along running on a different arch.
    Open source →
    Release notes

    v1.2.1

    Compare

    Choose a tag to compare

    Open source →
  18. v1.2.1-0.20220616123805-96ccb9d826ff 16 Jun 2022 pre-release

    Nothing published for this version

  19. v1.2.0 16 Jun 2022
    Release notes

    Installation instruction for Linux amd64:

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.2.0/kdigger-linux-amd64.tar.gz" | tar -xz \
&& curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.2.0/kdigger-linux-amd64.sha256" | sha256sum --quiet -c - \
&& chmod a+x kdigger-linux-amd64 \
&& sudo mv kdigger-linux-amd64 /usr/local/bin/kdigger \
&& kdigger

    This command downloads the compressed binary, extracts it, downloads sha256 and checks file integrity, adds execution rights on the binary, installs the binary in /usr/local/bin, and finally runs the binary to display the default help message.

    See the changelog for the new features and modifications of this minor version!

    Open source →
    Release notes

    Added

    • A new plugin, apiresources to retrieve all information that can be leaked by the discovery API. I had the idea after doing the last CTF challenge at KubeCon Europe by ControlPlane, Falco was installed in the cluster and it was useful to discover that. It could be discovered via the services plugin because Falco exposes one, but CRDs discovery could also be used.

    Changed

    • The "active" flag to "side-effects" because it was unclear for some person at BlackHat Asia when I presented what "active" meant on the list of plugins.
    • The API used to register, I grouped all the args in a structure and used the new "require client" field to properly load the context or not and fail gracefully to run the rest of the plugins in case the context is unavailable.
    • Fix a bug when no default namespaced was defined in a kubeconfig, now automatically default to the namespace "default".
    Open source →
    Release notes

    v1.2.0

    Compare

    Choose a tag to compare

    Open source →
  20. v1.1.1-0.20220527143031-8ed18956a379 27 May 2022 pre-release

    Nothing published for this version

  21. v1.1.1-0.20220506085024-46f8efe0dae6 06 May 2022 pre-release

    Nothing published for this version

  22. v1.1.0 21 Apr 2022
    Release notes

    Installation instruction for Linux amd64:

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.1.0/kdigger-linux-amd64.tar.gz" | tar -xz \
&& curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.1.0/kdigger-linux-amd64.sha256" | sha256sum --quiet -c - \
&& chmod a+x kdigger-linux-amd64 \
&& sudo mv kdigger-linux-amd64 /usr/local/bin/kdigger \
&& kdigger

    This command downloads the compressed binary, extracts it, downloads sha256 and checks file integrity, adds execution rights on the binary, installs the binary in /usr/local/bin, and finally runs the binary to display the default help message.

    See the changelog for the new features and modifications of this minor version!

    Open source →
    Release notes

    Added

    • Two new plugins, cgroups, and node and checks for NoNewPrivs and Seccomp flag in respectively, capabilities and syscall plugins. (Thanks for Andrew Martin & Michael Hausenblas for the inspiration from the Appendix 1 "A Pod-Level Attack" from the "Hacking Kubernetes" book)
    • Documentation about the Wildcard feature removal in CoreDNS.
    • New Makefiles rules to quickly start kdigger in a Pod in a kind cluster and to make a release.
    • Vagrantfile for development on different systems.

    Changed

    • Update dependencies and use Go 1.18.
    • Fix the got get oneliner using go install.
    • The output mechanism for plugins, now using comments array and flatten results that are of length one for better JSON output parsing.
    Open source →
    Release notes

    v1.1.0

    Compare

    Choose a tag to compare

    Open source →
  23. v1.0.1-0.20220421090512-2f3299931b8b 21 Apr 2022 pre-release

    Nothing published for this version

  24. v1.0.1-0.20220420200531-6568a3707511 20 Apr 2022 pre-release

    Nothing published for this version

  25. v1.0.1-0.20220119115105-7d856366ab75 19 Jan 2022 pre-release

    Nothing published for this version

  26. v1.0.1-0.20211117130825-8ad912420031 17 Nov 2021 pre-release

    Nothing published for this version

  27. v1.0.0 06 Oct 2021
    Release notes

    Installation instruction for Linux amd64:

    curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.0.0/kdigger-linux-amd64.tar.gz" | tar -xz \
&& curl -fSL "https://github.com/quarkslab/kdigger/releases/download/v1.0.0/kdigger-linux-amd64.sha256" | sha256sum --quiet -c - \
&& chmod a+x kdigger-linux-amd64 \
&& sudo mv kdigger-linux-amd64 /usr/local/bin/kdigger \
&& kdigger

    This command downloads the compressed binary, extracts it, downloads sha256 and checks file integrity, adds execution rights on the binary, installs the binary in /usr/local/bin and finally run the binary to display the default help message.

    Open source →
    Release notes
    • Initial release!
    Open source →
    Release notes

    v1.0.0

    Compare

    Choose a tag to compare

    Open source →

Every package, every release, already written down.

The archive is open and free. Watching your own project is what we are building next.

Browse the archive