opa

opa copied to clipboard

difference in output for wasm vs rego

3

``` $ echo 123 | opa eval -I -fpretty 'input.foo with input.foo as input' -twasm undefined $ echo 123 | opa eval -I -fpretty 'input.foo with input.foo as input' 123...

srenatus

Testing shared functions between policies

4

## What is the underlying problem you're trying to solve? I have a use case where I need to use a user-defined Rego function from another policy that is part...

ajith-sub

Improve reporting of `rego_unsafe_var_error`

3

The way we currently report `rego_unsafe_var_error`s is really confusing, and reasonably more so for people new to Rego. Given a policy like this: ```rego package play rule { my_string :=...

anderseknert

Allow user-defined zero-argument functions in Rego

6

It's possible to declare functions with zero arguments in Rego: ```rego package example foo() := 1 ``` these are however treated as regular rules, and there is no semantic difference...

johanfylling

The following policy: ```rego package play p := 1 p.q := 2 p.r[s] := 3 { s := "s" } ``` will generate the error: ``` 1 error occurred: policy.rego:3:...

johanfylling

AST: Include ref to package or rule in serialized annotations

3

The serialized AST contains a number rules, and it contains a number of annotations (if present). This is good, and tools using the AST, like [Regal](https://github.com/styraInc/regal) may use this to...

anderseknert

Var name lost in error message when using print and `some` without assignment

4

```rego package play allow { some x print(x) } ``` ``` 1 error occurred: policy.rego:5: rego_compile_error: var __local0__ is undeclared ```

anderseknert

Type match error in object literal with set keys

2

The following policy is rejected by the type checker: ```rego package bin a := {1, 2, 3, 4} b := {3, 4, 5} c := {4, 5, 6} d :=...

tsandall

Rego grammar from the documentation is out-of-date

1

There are a few instances where the grammar has not kept up-to-date with the parser: ``` 1. The % operator is missing 2. data.refrules.fruit["[color.name](http://color.name/)"](fruit.apple, "green") is a valid expr-call 3....

tsandall

nd_builtin_cache format is problematic

1

The format of the nd_builtin_cache field in decision_logs makes it difficult and computationally expensive to mask sensitive values: ```json -----------8

tsandall