opa
opa copied to clipboard
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
In Rego the "dot" operator selects fields in arrays, objects, and sets. If the field is missing, the variable assignments in the evaluation context do not produce a result, i.e.,...
## Short description When calling the builtin `io.jwt.decode_verify`, if you pass a token with the value `null` for `exp`, this causes an OPA panic. Speculation: It _appears_ that the panic...
## What is the underlying problem you're trying to solve? I'm working on OPA logs (request/response logs, decision logs, status logs, etc.). I've noticed that the request/response logs have a...
…r wrapping in vm.go as it was looking for an error message that was no longer present in 0.40.0, now checks if the wasm trap: interrupt is present in the...
## What is the underlying problem you're trying to solve? I see that there is an option in `opa eval` that tells opa to return a nonzero exit code if...
## Short description I'm using the Go API to apply some policies to a variety of different inputs. I'm using a JSON schema for each input type to validate rules...
## What is the underlying problem you're trying to solve? See the un-commented parts of the example https://play.openpolicyagent.org/p/aApnhKICLK We were asking around about ways to do some more complex string...
other half of #5043 this solves https://github.com/open-policy-agent/opa/issues/3945 drops events before logging decision, if the drop rule evaluates to `true` e.g. drop all granted requests ```ruby package system.log drop { input.result...
ccbr tool join in opa ecosystem update code file: docs/website/data/integerations.yaml Author:Niu Zhi
:construction: This PR is still under construction! Known limitations are discussed below. :sweat_smile: ----- This PR integrates the non-deterministic builtins cache (introduced in #4926) into the OPA server, ensuring that...