Awesome Open Source

Programming Languages

Search results for open policy agent

open-policy-agent x

131 search results found

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

Conftest ⭐ 2,781

Write tests against structured configuration data using the Open Policy Agent Rego query language

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

Certified Kubernetes Security Specialist ⭐ 1,911

Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

Find, install and publish Kubernetes packages

Azure Policy ⭐ 1,387

Repository for Azure Resource Policy built-in definitions and samples

Scubagear ⭐ 1,208

Automation to assess the state of your M365 tenant against CISA's baselines

Regula checks infrastructure as code templates (Terraform, CloudFormation, k8s manifests) for AWS, Azure, Google Cloud, and Kubernetes security and compliance using Open Policy Agent/Rego

Awesome Opa ⭐ 716

A curated list of OPA related tools, frameworks and articles

Chain Bench ⭐ 674

An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

Gatekeeper Library ⭐ 590

📚 The OPA Gatekeeper policy library

Community Policy ⭐ 538

This repo is for Microsoft Azure customers and Microsoft teams to collaborate in making custom policies.

Konstraint ⭐ 369

A policy management tool for interacting with Gatekeeper

Contrib ⭐ 312

Integrations, examples, and proof-of-concepts that are not part of OPA proper.

Inspektor ⭐ 268

Inspektor is a protocol-aware proxy that is used to enforce access policies👮

Dockerfile Security ⭐ 228

A collection of OPA rules to statically analyze Dockerfiles to improve security

Evaluate source control (GitHub) security posture

Regal is a linter for Rego, with the goal of making your Rego magnificent!

Rego Style Guide ⭐ 188

Style guide for Rego

CLI for building OPA policies into OCI images

Multi Tenancy ⭐ 182

Flux v1: Manage a multi-tenant cluster with Flux and Kustomize

Confectionery ⭐ 181

A library of rules for Conftest used to detect misconfigurations within Terraform configuration files

K8s Security Policies ⭐ 161

This repository offers a comprehensive library of security policies designed to enhance the security of Kubernetes cluster configurations. The policies are developed in accordance with the CIS Kubernetes benchmark.

Scan Kubernetes resource files , and helm charts for security configurations issues and best practices.

A lightweight container for distributed security policy evaluation

Deprek8ion ⭐ 135

Rego policies to monitor Kubernetes APIs deprecations.

Npm Opa Wasm ⭐ 122

Open Policy Agent WebAssembly NPM module (opa-wasm)

Appshield ⭐ 109

Security configuration checks for popular cloud native applications and infrastructure.

Gatekeeper ⭐ 107

Kubernetes Operator to manage Dynamic Admission Controllers using Open Policy Agent

Regolibrary ⭐ 106

The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.

The Open Policy Agent project standard library.

Scubagoggles ⭐ 86

SCuBA Security Configuration Baselines and assessment tool for Google Workspace

Optoggles ⭐ 85

Easily sync open-policy rules to your feature toggles

Kube Review ⭐ 81

Create Kubernetes AdmissionReview requests from Kubernetes resource manifests

Sample Tf Opa Policies ⭐ 81

Kubernetes An Enterprise Guide 2e ⭐ 74

Kubernetes - An Enterprise Guide 2E

Traefik Jwt Plugin ⭐ 73

Traefik plugin which checks JWT tokens for required fields. Supports Open Policy Agent (OPA) and signature validation with JWKS

Devspace Cloud ⭐ 69

DevSpace Cloud ⚡ Turn Kubernetes into a Powerful Developer Platform (new on-premise edition)

Alpha Omega ⭐ 65

Protect society by improving the security of open source software through direct maintainer engagement and expert analysis.

Echo Rest Api ⭐ 64

A Golang restful API boilerplate based on Echo framework v4. Includes tools for module generation, db migration, authorization, modular, authentication and more.

Opa Kafka Plugin ⭐ 57

Open Policy Agent (OPA) plug-in for Kafka authorization

Tracee Action ⭐ 55

Protect GitHub Actions with Tracee

Brainiac ⭐ 53

BrainIAC uses static code analysis to analyze IAC code to detect security issues before deployment. This tool can scan for issues like security policy misconfigurations, insecure cloud-based services, and compliance issues.

Opa Koans ⭐ 52

Docker Security Checker ⭐ 45

Dockerfile Security Checker using OPA Rego policies with Conftest

Fastapi Opa ⭐ 45

Fastapi OPA middleware incl. auth flow.

Dotnet Opa Wasm ⭐ 44

Call Open Policy Agent (OPA) policies in WASM (Web Assembly) from .NET Core

Container Image Sign And Verify With Cosign And Opa ⭐ 42

This is just a proof-of-concept project that aims to sign and verify container images using cosign and OPA (Open Policy Agent)

Build A Platform With Krm ⭐ 42

Build a platform with the Kubernetes resource model!

Watch your in cluster Kubernetes manifests for OPA policy violations and export them as Prometheus metrics

Spacelift Policies Example Library ⭐ 39

A library of example Spacelift policies

Opa Python Client ⭐ 38

Python client for Open Policy Agent

Prancer Compliance Test ⭐ 37

This repository includes cloud security policies for IaC and live resources.

Helm Conftest ⭐ 35

A Helm plugin for testing Helm Charts using Open Policy Agent

Opa Image Scanner ⭐ 35

Kubernetes Admission Controller for Image Scanning using OPA

Go Rest Template ⭐ 33

Golang REST API Template

Opa Java Client ⭐ 31

Opa Aws Cloudformation Hook ⭐ 30

AWS Cloudformation Hook for OPA-powered infrastructure policy enforcement

Policies ⭐ 30

A set of shared policies for use with Conftest and other Open Policy Agent tools

Conftest Action ⭐ 28

A GitHub Action for using Conftest

Pre Commit Opa ⭐ 28

Pre-commit git hooks for Open Policy Agent (OPA) and Rego development

Csp Security Policies ⭐ 27

Cloud Security Posture security policies

Prisma Cloud Compute Sample Code ⭐ 26

Example scripts, snippets, and other documents related to Prisma Cloud Compute

Rekor Sidekick ⭐ 26

🔍 Rekor transparency log monitoring and alerting

Container Signature Enforcer ⭐ 26

Policy As Code War ⭐ 26

OPA Gatekeeper vs Kyverno

Enterprise Opa ⭐ 25

Enterprise OPA is a distribution of Open Policy Agent with enterprise-grade features to get OPA into production quickly, easily, and inexpensively.

Mesh Kridik ⭐ 24

mesh-kridik is an open-source security checker that performs various security checks on a Kubernetes cluster with istio service mesh and is leveraged by OPA (Open Policy Agent) to enforce security rules.

Conftest Policy Packs ⭐ 23

Rego policies for enterprise-scale Compliance-as-Code with OPA Conftest.

Terraform Provider Abbey ⭐ 23

A Terraform provider for the Abbey Data Access Control Platform.

Security Agent Policies ⭐ 23

Policies for Security Agent - compliance and runtime checks

Opa Policies ⭐ 22

Contains OPA Policies for Dockerfiles, Kubernetes YAMLs, Terraform, etc

Rego Test Assertions ⭐ 21

Tiny Rego library with helper functions for unit testing

Audit Dependency-Track findings and policy violations via policy as code

Terraform Aws Opa ⭐ 20

OPA Terraform Demo

Sphinx Rego ⭐ 20

Sphinx extension that automatically documents Open Policy Agent Rego policies

Policykit ⭐ 20

A set of utilities and classes for working with Open Policy Agent based tools, including Gatekeeper and Conftest

Cloud Guardrails Gcp ⭐ 19

Recommended configuration guidance for Google Cloud Platform / Conseils de configuration recommandés pour Platforme infonuagique de Google

Pluggable ABAC/PBAC middleware

K8s Opa Boilerplate ⭐ 18

Boilerplate example of managing OPA with kustomize

Helm Chart Unit: helps to unit test rendering of your templates using policies

Sls Lambda Opa ⭐ 17

Experimental AWS ApiGateway Authorizer Go Lambda with embedded Open Policy Agent

Aws Infra Policy As Code With Terraform ⭐ 16

Implements OPA-based preventive security controls for AWS Infrastructure using Terraform Infrastructure as Code (IaC), that can establish a security baseline and safeguard resources before deployment into the AWS Accounts and reduce security risks.

Terraform Opa Ibm ⭐ 16

An OPA library to develop IT Control policies, for the IBM Cloud

Policy Hub Cli ⭐ 16

CLI for searching Rego policies

Linux Exploit Detection ⭐ 16

Linux based vulnerabilities (CVE) exploit detection through runtime security using Falco/Osquery/Yara/Sigma

Todo App ⭐ 15

Opal Example Policy Repo ⭐ 15

An example repository for OPAL policy tracking

Opa Envoy Spire Ext Authz ⭐ 15

OPA-Envoy-SPIRE External Authorization Example.

Config Connector Policy Demo ⭐ 14

Kubernetes Config Connector Policy Demo.

Openpolicyagent ⭐ 14

PSR-7 and PSR-15 OPA Authorization Middleware and Open Policy Agent Client

Gatekeeper Policies ⭐ 14

Policies that are to be enforced by GateKeeper for the Cloud Native Platform

Gatekeeper Library ⭐ 14

Collection of OPA Gatekeeper policies that can be used in your Kubernetes cluster.

Helm Chart ⭐ 13

Locust Helm Chart

Kong Authorization Opa ⭐ 13

Kong Plugin for Authorization (via Open Policy Agent)

Opa Spring Security ⭐ 13

Open Policy Agent for Spring Security

Thoth Application ⭐ 12

Thoth-Station ArgoCD Applications

Opa Gradle Plugin ⭐ 12

Plugin adding various tasks to help out integrating Open Policy Agent (OPA) in Gradle builds.

Sign your artifacts, source code or container images using Sigstore tools, Save the Signatures you want to use, and Validate & Control the deployments to allow only the known Sources based on Signatures, Maintainers & other payloads automatically.

1-100 of 131 search results

Privacy | About | Terms | Follow Us On Twitter

Copyright 2018-2024 Awesome Open Source. All rights reserved.