diff --git a/Dockerfile b/Dockerfile
index e0498a6..f381f9c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -10,6 +10,7 @@ ARG KUSTOMIZE_VERSION=v3.8.1
 ARG KUBESEAL_VERSION=0.18.1
 ARG KREW_VERSION=v0.4.4
 ARG VALS_VERSION=0.28.1
+ARG KUBECONFORM_VERSION=0.6.3
 
 # Install helm (latest release)
 # ENV BASE_URL="https://storage.googleapis.com/kubernetes-helm"
@@ -101,4 +102,9 @@ RUN . /envfile && echo $ARCH && \
     echo 'export PATH=/root/.krew/bin:$PATH' >> ~/.bashrc && \
     rm krew-linux_${ARCH}.tar.gz
 
+# Install kubeconform
+RUN . /envfile && echo $ARCH && \
+    curl -L https://github.com/yannh/kubeconform/releases/download/v${KUBECONFORM_VERSION}/kubeconform-linux-${ARCH}.tar.gz -o - | tar xz -C /usr/bin/ && \
+    chmod +x /usr/bin/kubeconform
+
 WORKDIR /apps
diff --git a/build.sh b/build.sh
index 0b43eed..2d62b0d 100755
--- a/build.sh
+++ b/build.sh
@@ -45,6 +45,11 @@ build() {
     | sort -rV | head -n 1 |sed 's/v//')
   echo "vals version is $vals_version"
 
+  # kubeconform latest
+  kubeconform_version=$(curl -s https://api.github.com/repos/yannh/kubeconform/releases | jq -r '.[].tag_name | select(startswith("v"))' \
+    | sort -rV | head -n 1 |sed 's/v//')
+  echo "kubeconform version is $kubeconform_version"
+
   docker build --no-cache \
     --build-arg KUBECTL_VERSION=${tag} \
     --build-arg HELM_VERSION=${helm} \
@@ -52,6 +57,7 @@ build() {
     --build-arg KUBESEAL_VERSION=${kubeseal_version} \
     --build-arg KREW_VERSION=${krew_version} \
     --build-arg VALS_VERSION=${vals_version} \
+    --build-arg KUBECONFORM_VERSION=${kubeconform_version} \
     -t ${image}:${tag} .
 
   # run test
@@ -78,6 +84,7 @@ build() {
       --build-arg KUBESEAL_VERSION=${kubeseal_version} \
       --build-arg KREW_VERSION=${krew_version} \
       --build-arg VALS_VERSION=${vals_version} \
+      --build-arg KUBECONFORM_VERSION=${kubeconform_version} \
       -t ${image}:${tag} .
   fi
 }