Kubescape Remediation Workflow

Kubescape Remediation Workflow A workflow diagram generated by Archify. 01 / Detection 02 / Triage 03 / Fix and rescan 04 / Verify and record EX / Retry Scheduled Scan · kubescape scan · Detection Scheduled Scan kubescape scan Receive Findings · Configured output · Detection Receive Findings Configured output Classify Severity · Triage Classify Severity Review Control · Impact and scope · Triage Review Control Impact and scope Choose Action · Fix or accept risk · Triage Choose Action Fix or accept risk Record Exception · Owner · expiry · scope · Triage Record Exception Owner · expiry · scope Change Code · Manifest updates · Fix and rescan Change Code Manifest updates Test and Deploy · Fix and rescan Test and Deploy Rescan · kubescape scan · Fix and rescan Rescan kubescape scan Checks Pass? · Pass / fail · Verify and record Checks Pass? Pass / fail Record Status · Fixed vs accepted risk · Verify and record Record Status Fixed vs accepted risk Investigate Again · Retry · Retry Investigate Again Retry Accepted risk Pass Fail Retry Legend User step Processing Decision Signal Data Deployment

Scan cadence

  • • Choose frequency for change rate and exposure
  • • PRs scan explicit files and preserve real exit codes
  • • Separate cluster, image and runtime scope/permissions

Notifications

  • • Configure output credentials and verify receipt
  • • Use organizational severity/SLO policies
  • • Inspect scan coverage even when scores improve

Closure criteria

  • • Validate behavior and rescan before closing a fix
  • • Failures/errors return to investigation
  • • Track exception owner, expiry and re-review