opa

opa copied to clipboard

Decode SANS with crypto.x509.parse_certificate_request

19

Hi as per item [490](https://github.com/orgs/open-policy-agent/discussions/490) in the discussion area I need to properly decode the SAN values for an X.509 certificate request. e.g. ``` output := crypto.x509.parse_certificate_request(input.csr) y := base64.decode(output.Extensions[0].Value)...

3goats

Parser does not respect capabilities file when using `opa eval`

8

Given the policy: ```rego package test import future.keywords.if p if { true } ``` and a modified capabilities file, where we've removed the `if` keyword: ```json { "builtins": [ {...

johanfylling

Octal numbers

4

## Short description OPA still have problems with octal numbers (leading zeros). I know that it was set as resolved in here, https://github.com/open-policy-agent/opa/issues/2947 but problem is still there. ## Steps...

juremedvesek

Crash for partial evaluation because of infinite recursion

1

```bash ./opa run --server --log-level debug policy.rego {"current_version":"0.58.0","level":"debug","msg":"OPA is up to date.","time":"2023-11-03T10:32:03+01:00"} ``` This is basic policy: ```rego package test import future.keywords.contains import future.keywords.every import future.keywords.if import future.keywords.in default allow...

nkey0

Currently, `opa fmt --rego-v1` will reject policies with calls to deprecated built-ins. Some built-ins could instead be replaced with calls to an alternative built-in or equivalent Rego.

johanfylling

`opa eval -b` does not honor the `--ignore` flag

1

```shell ❯ tree . ├── p.rego └── t.rego 1 directory, 2 files ``` Using a intentionally broken `t.rego` file, the following works for `opa eval`: ```shell ❯ opa eval -f...

anderseknert

Mask opa.runtime().env from Data API explanations

2

## What is the underlying problem you're trying to solve? We want to allow devs to troubleshoot policies with the Data API `explain` parameter, but also mask sensitive environment variable...

leefernandes

Opa format panic caused by comments

5

## Short description Wrongly placed comments can cause a panic error message in cli. OPA version: any (tested even with 0.57.0) Type: CLI ## Steps To Reproduce **opa fmt mypolicy.rego**...

sirpi

Access metrics from opa-envoy-plugin via HTTP metrics API

13

## Expected Behavior Hi, I'm using OPA as an Envoy authz filter with `opa-envoy-plugin` and can't get to access proper metrics from it. If I understand it well, the plugin...

emaincourt

Defined check performance improvement

4

When compared, avoiding realization of lazy types unless type of compared value supports a positive match. This removes type conversion cost of policies that only check presence of a value,...

johanfylling