Custom and Specific Checks

[nijdarshan]

Custom and Specific Checks

I have a requirement to scan my K8s clusters w.r.t a few CIS 1.6 benchmarks. And most of these checks align with the CIS benchmarks but there are few checks for which the configuration parameter (the flag) values have to be modified according to the requirement.

So, I wanted to understand the best way to modify a check or add a custom check and then install the kube-bench OR starboard to scan the clusters. Also, with the above use case I'm not required to check for all the benchmarks, so what is the best advice to have these checks?

Could you kindly please advise?