READMEmain
We couldn't render this README. Read it on GitHub
Permiflow
🚀 What is Permiflow?
Permiflow is a zero-mutation CLI tool that scans Kubernetes RBAC bindings and generates structured, human-readable reports. Built for security teams, platform engineers, and auditors.
- No CRDs. No agents. No API writes.
- Markdown, CSV, and JSON output
- Risk-aware diff detection between scans
- Safe for production clusters
📄 Documentation
All documentation has been moved into the docs/ directory:
| Guide | Description |
|---|---|
| Getting Started | Install, scan, and compare in minutes |
| Concepts | Understand RBAC, access bindings, and risk levels |
| (cmd) Scan | How to scan your cluster and save results |
| (cmd) Diff | Compare two scans and detect permission drift |
| (cmd) Generate Role | Safely build secure Role or ClusterRole YAML |
| (cmd) Resources | Explore Kubernetes API resources and verbs |
| (cmd) History & Metadata | Track and audit scans over time |
| Report Formats | Markdown, JSON, CSV explained |
| Risk Model | How Permiflow classifies HIGH, MEDIUM, LOW |
| MCP Server | Expose RBAC scanning via JSON-RPC for automation |
| Cursor Integration | Use Permiflow in Cursor IDE |
| Examples | Common CLI workflows and automation patterns |
| Configuration Reference | All flags and environment variables |
| FAQ | Common questions answered |
🛠️ Install
go install github.com/tutran-se/permiflow@latest
For Homebrew and Scoop options, see Getting Started.
🌐 License
MIT © Tutran SE. Built with care for Kubernetes security engineers.