Kubescape tool support

[slashben]

Add Kubescape Security Integration

This PR adds native Kubescape integration to kagent-tools, enabling AI assistants to analyze Kubernetes security posture directly from the cluster.

What is Kubescape?

Kubescape is a CNCF Kubernetes security platform that provides vulnerability scanning, configuration security analysis, and runtime observability. When deployed as an operator, it continuously monitors your cluster and stores security findings as Custom Resources.

New Capabilities

Security Scanning

• List and inspect vulnerability manifests to find CVEs in container images
• Review configuration scans to identify security misconfigurations (RBAC issues, missing security contexts, etc.)
• Get detailed remediation guidance for specific vulnerabilities

Runtime Observability

• Analyze ApplicationProfiles to see actual container behavior: running processes, file access patterns, syscalls, and Linux capabilities
• Inspect NetworkNeighborhoods to understand real network traffic patterns (ingress/egress connections, DNS, ports)

New Tools

Tool	Description
kubescape_check_health	Verify Kubescape operator is installed and operational
kubescape_list_vulnerability_manifests	List CVE scan results by image or workload
kubescape_list_vulnerabilities	Get all CVEs in a specific manifest with severity breakdown
kubescape_get_vulnerability_details	Deep dive into a specific CVE
kubescape_list_configuration_scans	List security configuration scan results
kubescape_get_configuration_scan	Get detailed misconfigurations for a workload
kubescape_list_application_profiles	List runtime behavior profiles
kubescape_get_application_profile	Inspect what a workload actually executes
kubescape_list_network_neighborhoods	List network communication patterns
kubescape_get_network_neighborhood	Analyze actual network connections

Dependency

Install Kubescape operator with desired capabilities:

helm upgrade --install kubescape kubescape/kubescape-operator -n kubescape --create-namespace
--set capabilities.vulnerabilityScan=enable
--set capabilities.continuousScan=enable
--set capabilities.runtimeObservability=enable

[dimetron]

@slashben - thanks for contributing, could you please rebase with latest main to resolve CI and linter errors

see slashben@d822411

[slashben]

@slashben - thanks for contributing, could you please rebase with latest main to resolve CI and linter errors

see slashben@d822411

@dimetron done!

[slashben]

@dimetron I have increased the timeout for golinter, can you re-run tests?

[slashben]

@EItanya @dimetron thanks for the cooperation and the cool project!