Sidecar Signal reads the Kubernetes workload baggage

Field notes

The scanner works from declared Kubernetes workload configuration rather than claimed cluster state, examining Pod-template containers in common workload YAML. Its named checks include image mutability, missing limits, absent health probes, pull behavior, and recognizable sidecar patterns. The page presents a three-step method—Observe, Explain, Track—and says future release and advisory monitoring will add dated evidence as recommendations change.