● pre-deployment intelligence

Catch what
kubectl apply
won't.

TRL analyzes Kubernetes manifests before deployment to detect misconfigurations, optimize resources, and identify security risks — before any of it hits your cluster.

manifests helm kustomize CI/CD ready open source
$ python -m trl explain ./examples/demo/bad.yaml
 
📦 Resource: backend
❌ HIGH  privileged-container
⚠ MEDIUM no-readiness-probe
⚠ MEDIUM no-liveness-probe
⚠ MEDIUM run-as-root
⚠ LOW    under-provisioning
⚠ LOW    latest-tag
 
📊 Errors: 1 Warnings: 6 Optimizations: 0
❌ Status: FAILED
4
checks in one pass
0
cluster access required
100%
open source
<1s
per manifest, typical
The problem

Small YAML mistakes, expensive consequences.

Over-provisioned resources wasted cost
Missing probes unstable deployments
Security misconfigs real risk
Fix issues before deployment

One scan, four kinds of insight.

TRL analyzes Kubernetes manifests before deployment to detect misconfigurations, optimize resources, and identify security risks — and explains every finding in plain language.

🔍

Detect

Scans manifests for over-provisioned resources, missing probes, and misconfigurations before anything ships.

⚙️

Optimize

Right-sizes resource requests and limits, so you're not paying for capacity you don't need.

🔐

Secure

Flags real security risk — from missing policies to exposed attack surface — before it reaches your cluster.

📊

Explain

Turns every finding into a plain-language report, so the "why" is as clear as the "what."

How it works

Three commands, before anything touches your cluster.

TRL runs directly against your manifests — no cluster access required. Analysis-only, or the full optimize + validate + secure pipeline.

1

Install and point it at a manifest

Clone the repo, install requirements, and run an analysis-only pass — fastest way to see what TRL finds.

python -m trl explain ./app.yaml
2

Read the report

Every finding names the resource, severity, impact, and fix — as plain CLI output or machine-readable JSON.

python -m trl explain ./app.yaml --output=json
3

Optimize and gate your pipeline

Run the full pipeline in dry-run mode, or wire it into CI/CD to fail builds on real issues.

python -m trl optimize ./app.yaml --dry-run
Why TRL

Most tools do one thing. TRL does three.

Tool
Validation
Security
Optimization
Auto Fix
kube-score
trivy
TRL
planned
See it in action

Watch TRL scan a real manifest.

Ship with confidence.

TRL is open source under Apache 2.0. Clone it, run your first analysis in under a minute, and see what's hiding in your manifests.

View TRL on GitHub
Clariops

Clariops builds developer-first tools focused on clarity, reliability, and intelligence in Kubernetes and DevOps. TRL is the first step toward a broader platform for pre-deployment intelligence.