Helmsniff is a Go CLI that scans rendered Kubernetes and Helm manifests and generates CSV or JSON reports of security misconfigurations. It flags issues like missing securityContexts, insecure HTTP URLs, hostNetwork usage, privileged containers and Docker socket mounts, and supports directory or stdin input, parallel execution, and standard Makefile targets.

• Helmsniff scans rendered K8s/Helm YAML and outputs a CSV or JSON report flagging misconfigurations like privileged containers, missing resource limits, hostNetwork usage, and Docker socket mounts.
• It accepts input from a directory or stdin, letting you pipe `helm template` output directly in without temp files, and supports parallel scanning of multiple charts via GNU parallel.
• Each report row includes chart path and file path context, with checks marked 1 (violation) or 0 (safe), plus K8S_STATUS/HELM_STATUS boolean fields.
• Built in Go (requires 1.22+ and GNU Make), with a clean codebase split into cmd/main.go, config, parser, and scanner modules, backed by tests and an ARCHITECTURE.md documenting each check.