opa
opa copied to clipboard
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
We're far behind... It's causing issues for the alpine package build, too. Besides missing out on new features and improvements. Tried it in https://github.com/open-policy-agent/opa/pull/6556 but hit some build problems on...
Fixes #6827 ### Why the changes in this PR are needed? These changes would be an enhancement over first having to generate the indices, then again a count of the...
For cases where you need to count the occurances of a substring in some text, it would be nice if instead of this: ```rego n := count(indexof_n(string, substring)) ``` One...
### Why the changes in this PR are needed? To allow for Azure kubernetes deployments to utilize [workload identity](https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview?tabs=dotnet), their newer approach to federating with identity providers. ### What are...
## Short description I am currently trying to trigger an error in a specific rule in rego in order to ensure that this specific codepath is only evaluated when it...
I'm helping a project modernizing their policies, and to prepare them for OPA 1.0. Running `opa fmt --rego-v1` on one of their policies resulted in output that `opa check` later...
## Short description The graphql.parse(query, schema) builtin that was added in v0.41 no longer returns definition as part of the query ast had return the property definition as port of...
Topdown contains two global caches for compiled regex and glob match patterns: * https://github.com/open-policy-agent/opa/blob/main/topdown/regex.go#L19 * https://github.com/open-policy-agent/opa/blob/main/topdown/glob.go#L14 Using a modified version of [stress-opa](https://github.com/tsandall/stress-opa) I was able to cause OPA to use...
### Why the changes in this PR are needed? Per https://github.com/open-policy-agent/opa/issues/6495, it is important to users using build systems like babel to allow `opa build` to include symlinked files in...
Having worked on some Regal rules around metadata annotations recently, and the [ambiguous-scope](https://docs.styra.com/regal/rules/idiomatic/ambiguous-scope) rule specifically, I was surprised to see that the `entrypoint` attribute worked for annotations scoped to `rule`....