advanced-kubernetes
Warn
Audited by Socket on Aug 25, 2026
1 alert found:
AnomalyAnomalyscripts/setup-operator-dev.sh
LOWAnomalyLOW
scripts/setup-operator-dev.sh
No clear indicators of intentional malware (no exfiltration, backdoors, or suspicious runtime behaviors) are present in this fragment. The primary concern is supply-chain integrity: the script installs an internet-fetched executable into a privileged system path without checksum/signature verification and installs kind using a mutable `@latest` tag, and it applies a remote manifest without integrity pinning. These weaknesses materially increase risk if upstream artifacts or delivery endpoints are compromised.
Confidence: 74%Severity: 60%
Audit Metadata