# Kubescape adds recurring security scans and tightens repository workflows

_Published Thursday, November 5, 2026 at 2:15 PM EST · Security · Latest · Tier 2 — Notable_

Kubescape added automated weekly security baseline scans to five core repositories and hardened workflows across ten or more repositories, according to an OpenSSF case study. The Kubernetes security project reports passing Open Source Project Security Baseline Level Two and completing all six Security Slam badges.

Contributors pinned GitHub Actions to specific commits and reduced workflow token permissions. Broader security changes included protections against CSV formula injection and tighter handling of registry credentials. These changes affect software that can run with privileged access in production Kubernetes clusters.

Automated coverage currently spans five core repositories; documentation and architectural assessments still require maintainer review.

## Sources

- [Open Source Security Foundation](https://openssf.org/blog/2026/11/05/case-study-kubescape-completes-all-six-security-slam-badges-with-openssf/)

---
Canonical: https://techandbusiness.org/newswire/JdT2bkI2QcxHBUpQXsRb49
Published: 2026-11-05T19:15:56.383Z
Story chronology: 2026-11-05T19:02:30.000Z
Retrieved: 2026-11-06T22:56:12.257Z
Publisher: Tech & Business (techandbusiness.org)