Helmsniff is a Go CLI that scans rendered Kubernetes and Helm manifests and generates CSV or JSON reports of security misconfigurations. It flags issues like missing securityContexts, insecure HTTP URLs, hostNetwork usage, privileged containers and Docker socket mounts, and supports directory or stdin input, parallel execution, and standard Makefile targets.