Home

Awesome

Run conftest-unittests.sh Check POLICIES.md is up-to-date Lint policies with Regal Run gatekeeper-k8s-integrationtests.sh OpenSSF Scorecard

rego-policies

Rego policies collection.

Policies

For a full list of policies, see the auto-generated POLICIES.md

The naming of the policies follows the Gatekeeper format, as described here.

Want to run the policies on a k8s/OCP cluster? See TESTING.md

Tools

Conftest

conftest is a CLI to execute rego policies. It can be used to test locally before pushing to OPA.

OPA Playground

OPA provides a web based playground, which can highlight which lines have been activated. Having issues with your policy? check it out with "Coverage" enabled:

Slack for all things

Stuck on a problem?