open-policy-agent
There are 20 repositories under open-policy-agent topic.
open-policy-agent / opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
Language:Go 10824- opal
permitio / opal
Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)
Language:Python 5385 Write tests against structured configuration data using the Open Policy Agent Rego query language
Language:Go 3066Checkmarx / kics
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Language:Open Policy Agent 2502- Language:PowerShell 2341
- Certified-Kubernetes-Security-Specialist
walidshaari / Certified-Kubernetes-Security-Specialist
Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.
Language:AGS Script 2084 A curated list of OPA related tools, frameworks and articles
aquasecurity / chain-bench
An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.
Language:Go 758plexsystems / konstraint
A policy management tool for interacting with Gatekeeper
Language:Go 392- regal
Regal is a linter and language server for Rego, bringing your policy development experience to the next level!
Language:Go 345 Integrations, examples, and proof-of-concepts that are not part of OPA proper.
Language:Go 340cisagov / ScubaGoggles
SCuBA Secure Configuration Baselines and assessment tool for Google Workspace
Language:Open Policy Agent 269alcideio / skan
Scan Kubernetes resource files , and helm charts for security configurations issues and best practices.
Language:JavaScript 206Style guide for Rego
- multi-tenancy
fluxcd / multi-tenancy
Flux v1: Manage a multi-tenant cluster with Flux and Kustomize
Language:Open Policy Agent 180 raspbernetes / k8s-security-policies
This repository offers a comprehensive library of security policies designed to enhance the security of Kubernetes cluster configurations. The policies are developed in accordance with the CIS Kubernetes benchmark.
Language:Open Policy Agent 174anderseknert / kube-review
Create Kubernetes AdmissionReview requests from Kubernetes resource manifests
Language:Go 161Open Policy Agent WebAssembly NPM module (opa-wasm)
Language:JavaScript 152traefik-plugins / traefik-jwt-plugin
Traefik plugin which checks JWT tokens for required fields. Supports Open Policy Agent (OPA) and signature validation with JWKS
Language:Go 129An extension for VS Code which provides support for OPA and the Rego policy language
Language:TypeScript 123devspace-cloud / devspace-cloud
DevSpace Cloud ⚡ Turn Kubernetes into a Powerful Developer Platform (new on-premise edition)
Language:Open Policy Agent 111replicatedhq / gatekeeper
Kubernetes Operator to manage Dynamic Admission Controllers using Open Policy Agent
Language:Go 106jlucaspains / go-rest-template
Golang REST API Template
Language:Go 90- the-container-security-book
mhausenblas / the-container-security-book
The Container Security Book—a free book for practitioners
quicsec / quicsec
HTTP/3-enable existing HTTP apps. Leverage HTTP3 native features and auto-enable workload identity (SPIFFE), AuthN (mTLS/x509, OIDC/Auth0-Okta), AuthZ (OPA), defense-in-depth (WAAP/WAF), and observability (metrics, logs, alerting, dashboard).
Language:Go 77developer-guy / policy-as-code-war
OPA Gatekeeper vs Kyverno
instrumenta / policies
A set of shared policies for use with Conftest and other Open Policy Agent tools
Language:Open Policy Agent 66busykoala / fastapi-opa
Fastapi OPA middleware incl. auth flow.
Language:Python 65This is just a proof-of-concept project that aims to sign and verify container images using cosign and OPA (Open Policy Agent)
Language:Go 63StyraOSS / opa-kafka-plugin
Open Policy Agent (OPA) plug-in for Kafka authorization
Language:Scala 63Turall / OPA-python-client
Python client for Open Policy Agent
Language:Python 61zotoio / sls-lambda-opa
Experimental AWS ApiGateway Authorizer Go Lambda with embedded Open Policy Agent
Language:Go 53- kove
cmacrae / kove
Watch your in cluster Kubernetes manifests for OPA policy violations and export them as Prometheus metrics
Language:Go 48 OPA-Envoy-SPIRE External Authorization Example.
Language:Go 47christophwille / dotnet-opa-wasm
Call Open Policy Agent (OPA) policies in WASM (Web Assembly) from .NET Core
Language:C# 45aws-samples / aws-infra-policy-as-code-with-terraform
Implements OPA-based preventive security controls for AWS Infrastructure using Terraform Infrastructure as Code (IaC), that can establish a security baseline and safeguard resources before deployment into the AWS Accounts and reduce security risks.
Language:Open Policy Agent 43