I run Debuggix, a free security scanner that runs 9 engines in parallel. For Episode 3 of our "Verified or Not" series, we scanned Kubernetes Goat — a deliberately vulnerable K8s cluster designed for security training.

Here's what happened.

The Scan

Kubernetes Goat is a massive repo. Multiple Dockerfiles, infrastructure configs, Python scripts, shell scripts — the kind of project that makes scanners light up like a Christmas tree.

I pasted the URL into Debuggix and let all 9 engines rip: Semgrep, Bandit, Gitleaks, TruffleHog, Trivy, ESLint, Hadolint, Checkov, OSV-Scanner.

The Raw Results

134 total findings

2 critical

32 high

33 medium

14 low

A traditional scanner would dump all 134 on you and call it a day.

What Debuggix Did Differently

The AI filter cross-referenced every finding against the project's README.…