awesome-opa

OPA Kubernetes validation and mutation testing environment

Cosign Provider a new provider of OPA Gatekeeper's ExternalData feature to verify container images

A validating and mutating webhook that enforces CRD-based policies executed by OPA for Kubernetes

A Conftest plugin that transforms input objects to be compatible with OPA Gatekeeper policies.

Guide on how to setup your CI environment to test your Kubernetes configuration against your policy in a CI environment as part of a GitOps strategy

A collection of constraint templates and sample constraints that you can use with Gatekeeper

Great blog on testing patterns for Rego, by Nicholaos Mouzourakis

Command line unit test runner for OPA Gatekeeper

GitHub Action to automate testing for your OPA Rego policies and generates a report.

CLI tool to quickly create

Colors

Convert OPA test coverage report to a JSON format supported by Codecov

Policy-as-Code for African AI agent compliance: NDPA 2023, CBN transaction limits, BVN/NIN data protection, NFIU AML/CFT, and POPIA. Includes 88 OPA tests, CI pipeline, and full compliance mapping.

A library of rules for Conftest used to detect Terraform misconfigurations.

Collection of Conftest policies for "Compliance-as-Code" security policies and general engineering standards. Policies targeting Terraform, Dockerfiles, package.json (NodeJS) files, etc

Raspernetes library for fortifying cluster configurations

Comprehensive set of Kubernetes policies from Kubescape

Community-owned policy library for OPA

A self-hosted OPA Playground Alternative

Alternative REPL implementation for Rego

A tool that'll check your Rego source files and report the minimum compatible OPA version required

Monitoring implementation guide for OPA Gatekeeper (

Nopa is a simple way to store OPA bundles in NATS object storage with real time updates and custom module injection.

Alluxio is a data orchestration tool which allows

Controlling Kafka Data Flows using Open Policy Agent

Data filtering for MongoDB and JPA using OPA

OPA-Elasticsearch Data Filtering Example

Integrating OPA with the Google Calendar API

The Power of Data: Calendar-based Policy Enforcement

Anders Eknert 🇸🇪 - OPA developer advocate (

Antonio Berben 🇪🇸 - OPA Contributor & Blogger

Ash Narkar 🇺🇸 - OPA maintainer (

Charlie Egan 🇬🇧 - OPA developer advocate (

Batuhan Apaydin 🇹🇷 - OPA and many CNCF projects (

ASP.NET Core authorization middleware

Custom Bottle Application Authorization

Middleware and utilities for app authorization with OPA in Clojure

C# SDK for interacting with OPA (

A collection of OPA rules to statically analyze Dockerfiles to improve security

OPA Rego policies for Dockerfile Security checks using Conftest

Syntax highlighting for the Atom editor

Rego mode and minimal key map for

Complete Rego language support for CodeMirror 6, with syntax highlighting, autocomplete, and intelligent data context awareness.

Emacs Major mode for working with Rego

Rego syntax support for

OPA plugin for the IntelliJ IDE