#

opa

The Open Policy Agent (OPA, pronounced “oh-pa”) is an open source, general-purpose policy engine that unifies policy enforcement across the stack. OPA provides a high-level declarative language that lets you specify policy as code and simple APIs to offload policy decision-making from your software. You can use OPA to enforce policies in microservices, Kubernetes, CI/CD pipelines, API gateways, and more.

Community & Support

Website

GitHub

Documentation

What is OPA

Here are 81 public repositories matching this topic...

open-policy-agent / opa

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

json declarative policy authorization opa cloud-native compliance doge lolcat open-policy-agent

Updated Apr 9, 2025
Go

open-policy-agent / gatekeeper

🐊 Gatekeeper - Policy Controller for Kubernetes

kubernetes security validation cncf mutation policy opa gatekeeper hacktoberfest admission policy-engine

Updated Apr 9, 2025
Go

aserto-dev / topaz

Cloud-native authorization for modern applications and APIs

api golang security authorization opa rbac cloud-native access-control abac zanzibar rebac

Updated Apr 10, 2025
Go

google / gke-policy-automation

Tool and policy library for reviewing Google Kubernetes Engine clusters against best practices

gcp policy gke opa rego

Updated Mar 21, 2025
Go

plexsystems / konstraint

A policy management tool for interacting with Gatekeeper

kubernetes policy opa gatekeeper open-policy-agent rego conftest

Updated Apr 8, 2025
Go

oxyno-zeta / s3-proxy

S3 Reverse Proxy with GET, PUT and DELETE methods and authentication (OpenID Connect and Basic Auth)

s3 s3-bucket reverse-proxy opa openid-connect basic-authentication serve-static s3-proxy

Updated Apr 9, 2025
Go

open-policy-agent / opa-envoy-plugin

A plugin to enforce OPA policies with Envoy

policy authorization opa cloud-native compliance envoy istio-proxy opa-envoy

Updated Apr 8, 2025
Go

open-policy-agent / contrib

Integrations, examples, and proof-of-concepts that are not part of OPA proper.

integrations hack proof-of-concept opa contrib open-policy-agent

Updated Nov 29, 2024
Go

regal

StyraInc / regal

Regal is a linter and language server for Rego, bringing your policy development experience to the next level!

language-server linter static-analysis opa code-quality lsp magnificent open-policy-agent policy-as-code rego

Updated Apr 9, 2025
Go

gogatekeeper / gatekeeper

An OpenID / Proxy service

keycloak authentication authorization opa uma oidc-proxy

Updated Apr 1, 2025
Go

reposaur / reposaur

Open source compliance tool for development platforms.

github git go golang security gitlab audit report opa compliance golang-tools github-actions rego

Updated Oct 30, 2023
Go

open-policy-agent / kube-mgmt

Sidecar for managing OPA instances in Kubernetes.

kubernetes devops policy opa k8s

Updated Mar 28, 2025
Go

aquasecurity / postee

Notice: Postee is no longer under active development or maintenance.

slack docker kubernetes golang security automation jira messaging opa cloud-native aqua devsecops soar rego

Updated Apr 9, 2025
Go

anderseknert / kube-review

Create Kubernetes AdmissionReview requests from Kubernetes resource manifests

kubernetes opa k8s kubectl admission-controller open-policy-agent admission-webhook policy-as-code mutating-admission-webhook validating-admission-webhook kube-review admission-review

Updated Apr 1, 2025
Go

traefik-plugins / traefik-jwt-plugin

Traefik plugin which checks JWT tokens for required fields. Supports Open Policy Agent (OPA) and signature validation with JWKS

jwt opa open-policy-agent traefik-plugin

Updated Jun 29, 2024
Go

policy-hub / policy-hub-cli

CLI for searching Rego policies

kubernetes cncf opa cloud-native hacktoberfest policies openpolicyagent rego

Updated Feb 5, 2022
Go

dzungtran / echo-rest-api

A Golang restful API boilerplate based on Echo framework v4. Includes tools for module generation, db migration, authorization, modular, authentication and more.

go golang template boilerplate modular rest-api clean-architecture opa firebase-auth echo-framework openpolicyagent cuelang

Updated Sep 19, 2024
Go

open-policy-agent / opa-docker-authz

A policy-enabled authorization plugin for Docker.

docker authorization opa

Updated Mar 31, 2025
Go

sigstore / cosign-gatekeeper-provider

🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their signatures

opa gatekeeper keyless cosign sigstore rekor fulcio

Updated Apr 2, 2024
Go

brendanjryan / ccheck

A command line tool for validating Kubernetes configs with rego

kubernetes yaml validation test cncf opa rego

Updated Jul 18, 2019
Go

Followers: 18 followers
Repository: open-policy-agent/opa
Website: www.openpolicyagent.org

Related Topics

authorization open-source-policy policy policy-as-code