opa icon indicating copy to clipboard operation
opa copied to clipboard

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

Results 302 opa issues
Sort by recently updated
recently updated
newest added

In Rego the "dot" operator selects fields in arrays, objects, and sets. If the field is missing, the variable assignments in the evaluation context do not produce a result, i.e.,...

design
inactive

## Short description When calling the builtin `io.jwt.decode_verify`, if you pass a token with the value `null` for `exp`, this causes an OPA panic. Speculation: It _appears_ that the panic...

bug

## What is the underlying problem you're trying to solve? I'm working on OPA logs (request/response logs, decision logs, status logs, etc.). I've noticed that the request/response logs have a...

feature-request

…r wrapping in vm.go as it was looking for an error message that was no longer present in 0.40.0, now checks if the wasm trap: interrupt is present in the...

## What is the underlying problem you're trying to solve? I see that there is an option in `opa eval` that tells opa to return a nonzero exit code if...

feature-request

## Short description I'm using the Go API to apply some policies to a variety of different inputs. I'm using a JSON schema for each input type to validate rules...

bug

## What is the underlying problem you're trying to solve? See the un-commented parts of the example https://play.openpolicyagent.org/p/aApnhKICLK We were asking around about ways to do some more complex string...

good first issue
feature-request

other half of #5043 this solves https://github.com/open-policy-agent/opa/issues/3945 drops events before logging decision, if the drop rule evaluates to `true` e.g. drop all granted requests ```ruby package system.log drop { input.result...

ccbr tool join in opa ecosystem update code file: docs/website/data/integerations.yaml Author:Niu Zhi

waiting-for-response

:construction: This PR is still under construction! Known limitations are discussed below. :sweat_smile: ----- This PR integrates the non-deterministic builtins cache (introduced in #4926) into the OPA server, ensuring that...