opa
opa copied to clipboard
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.6.1 to 0.6.2. Release notes Sourced from aquasecurity/trivy-action's releases. v0.6.2 What's Changed fix(config): Drop mixing of options with yaml config. by @simar7 in aquasecurity/trivy-action#148 chore: improve message...
There are a bunch of related modules that should be updated to stay on top of this. Since the number of PRs are annoying and I'd rather take care of...
`union()` is very slow in Rego because of how it is implemented currently. Consider the implementation of the `union` builtin: ```go // builtinSetUnion returns the union of the given input...
While unlikely to be a problem in real-world policies, this coercion of float-value keys in maps is pretty confusing: ``` % opa eval -fpretty '{1: true, 1.0: false}' { "1":...
The new (and awesome!) feature for doing schema verification of the input document should be available when running OPA as a server. This would cleanly separate input verification from "real"...
## Short description This is the environment I am running in, where the issue was noted ``` $ opa version Version: 0.41.0 Build Commit: 0d6a109 Build Timestamp: 2022-06-02T17:46:28Z Build Hostname:...
## What part of OPA would you like to see improved? Motivating issue: https://github.com/open-policy-agent/gatekeeper/issues/2060 When adding data to the in-memory OPA storage object, `inmem.store.Write` round-trips the incoming object through JSON...
## Short description Was trying to use objects (key/value pairs) to simulate switch statements. It worked for most of the part but fails when a function that does comparison is...
While working on Rego grammar for tree-sitter (https://github.com/shaded-enmity/tree-sitter-rego/blob/complete-ebnf-grammar/grammar.js => https://github.com/FallenAngel97/tree-sitter-rego/pull/2/files) I encountered a couple of problems that I'd like to bring up for discussion: 1. The first symbol for `rule-head-obj`...
Decision log events should include all of the information necessary to re-execute policy evaluation. Today if policies depend on time.now_ns() or other (custom) non-deterministic built-in functions, it is not easy...