Skip to content

Pluggable Scanners


Pluggable configuration audit scanners are being deprecated. They did a great job when we first integrated them with Starboard, but recently we found that they are not very efficient and customizable. Therefore, we are switching over to efficient OPA Rego-based configuration scanner that ships with many Built-in Policies.

Starboard relies on a configuration checker to run variety of tests on discovered workloads to make sure they are configured using best practices.

You can choose any of the included configuration checkers or implement your own plugin. The plugin mechanism is based on in-tree implementations of the configauditreport.Plugin Go interface. For example, check the implementation of the Polaris plugin.

These are currently integrated configuration checkers:

What's Next?