A policy management tool for interacting with Gatekeeper

Scan Kubernetes resource files , and helm charts for security configurations issues and best practices.

Kubernetes tools for GitHub Actions CI

This repository offers a comprehensive library of security policies designed to enhance the security of Kubernetes cluster configurations. The policies are developed in accordance with the CIS Kubernetes benchmark.

Rego policies collection

Github Action that setup Kubernetes tools (kubectl, kustomize, helm, kubeconform, conftest, yq, rancher, tilt, skaffold) very fast and cache them on the runner. Please [✩Star] if you're using it!

All-in-one collection of tools to run linting, validation, static code analysis, security scanning, tests, auditing, kustomize build, and dry run configuration for Kubernetes Manifests.

A set of shared policies for use with Conftest and other Open Policy Agent tools

Pre-commit git hooks for Open Policy Agent (OPA) and Rego development

A Helm plugin for testing Helm Charts using Open Policy Agent

Dockerfile Security Checker using OPA Rego policies with Conftest

Rego policies for enterprise-scale Compliance-as-Code with OPA Conftest.

The Community repository is the place to go for support with OPA and OPA Sub-Projects, like Conftest and Gatekeeper.

A GitHub Action for using Conftest

Sphinx extension that automatically documents Open Policy Agent Rego policies

A set of policies for Open Policy Agent to validate OpenAPI definitions.

Easily run Conftest, pull remote policies, surface the results, and obtain test metrics

Run opa test command with GitHub Actions

Unified lint runners for various configuration files

[Archived] Blog post about OPA, Conftest, Gatekeeper and Konstraint