Open Policy Agent (OPA) is an open source, general-purpose policy engine.

Write tests against structured configuration data using the Open Policy Agent Rego query language

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

Automation to assess the state of your M365 tenant against CISA's baselines

A curated list of OPA related tools, frameworks and articles

An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

A policy management tool for interacting with Gatekeeper

Integrations, examples, and proof-of-concepts that are not part of OPA proper.

Regal is a linter for Rego, with the goal of making your Rego magnificent!

Scan Kubernetes resource files , and helm charts for security configurations issues and best practices.

Style guide for Rego

Flux v1: Manage a multi-tenant cluster with Flux and Kustomize

This repository offers a comprehensive library of security policies designed to enhance the security of Kubernetes cluster configurations. The policies are developed in accordance with the CIS Kubernetes benchmark.

Open Policy Agent WebAssembly NPM module (opa-wasm)

SCuBA Security Configuration Baselines and assessment tool for Google Workspace

Kubernetes Operator to manage Dynamic Admission Controllers using Open Policy Agent

DevSpace Cloud ⚡ Turn Kubernetes into a Powerful Developer Platform (new on-premise edition)

Create Kubernetes AdmissionReview requests from Kubernetes resource manifests