opa

opa copied to clipboard

Update our wasmtime

1

We're far behind... It's causing issues for the alpine package build, too. Besides missing out on new features and improvements. Tried it in https://github.com/open-policy-agent/opa/pull/6556 but hit some build problems on...

srenatus

Implement strings.count built-in function

1

Fixes #6827 ### Why the changes in this PR are needed? These changes would be an enhancement over first having to generate the indices, then again a count of the...

Manish-Giri

Add `strings.count(string, substring)` built-in function

6

For cases where you need to count the occurances of a substring in some text, it would be nice if instead of this: ```rego n := count(indexof_n(string, substring)) ``` One...

anderseknert

Resurrect Workload Identity Work

7

### Why the changes in this PR are needed? To allow for Azure kubernetes deployments to utilize [workload identity](https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview?tabs=dotnet), their newer approach to federating with identity providers. ### What are...

ledbutter

Errors from builtins in tests are not reported as documented

9

## Short description I am currently trying to trigger an error in a specific rule in rego in order to ensure that this specific codepath is only evaluated when it...

selaux

I'm helping a project modernizing their policies, and to prepare them for OPA 1.0. Running `opa fmt --rego-v1` on one of their policies resulted in output that `opa check` later...

anderseknert

## Short description The graphql.parse(query, schema) builtin that was added in v0.41 no longer returns definition as part of the query ast had return the property definition as port of...

kroekle

Memory leak in topdown due to global compiled regex/glob pattern cache

1

Topdown contains two global caches for compiled regex and glob match patterns: * https://github.com/open-policy-agent/opa/blob/main/topdown/regex.go#L19 * https://github.com/open-policy-agent/opa/blob/main/topdown/glob.go#L14 Using a modified version of [stress-opa](https://github.com/tsandall/stress-opa) I was able to cause OPA to use...

tsandall

Add flag to follow symlinks when running opa build

2

### Why the changes in this PR are needed? Per https://github.com/open-policy-agent/opa/issues/6495, it is important to users using build systems like babel to allow `opa build` to include symlinked files in...

tjons

Not clear why metadata attribute `entrypoint` requires `scope: rule`

1

Having worked on some Regal rules around metadata annotations recently, and the [ambiguous-scope](https://docs.styra.com/regal/rules/idiomatic/ambiguous-scope) rule specifically, I was surprised to see that the `entrypoint` attribute worked for annotations scoped to `rule`....

anderseknert