policy-as-code

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Automate Kubernetes Configuration Editing

PacBot (Policy as Code Bot)

Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules.

Policy and data administration, distribution, and real-time updates on top of Open Policy Agent

A data standard to enable right-of-way regulation and two-way communication between mobility companies and local governments.

A curated list of OPA related tools, frameworks and articles

A curated list of blogs, videos, tutorials, code, tools, scripts, and anything useful to help you learn Azure Policy - by @jesseloudon

Style guide for Rego

MagTape Policy-as-Code for Kubernetes

Bicep and Terraform code examples for policy-as-code workflows. Azure governance guardrails and automation - by @jesseloudon

A curated list of policy-as-code resources like blogs, videos, and tools to practice on for learning Policy-as-Code.

A linting tool that helps you to write better Chef Infra cookbooks and InSpec profiles by detecting and automatically correcting style, syntax, and logic mistakes in your code.

Webhook server that evaluates WebAssembly policies to validate Kubernetes requests

Manage admission policies in your Kubernetes cluster with ease

Create Kubernetes AdmissionReview requests from Kubernetes resource manifests

INTERCEPT / Policy as Code Static Analysis Auditing / SAST

OPA Gatekeeper vs Kyverno

Hexa Policy Orchestrator enables you to manage all of your access policies consistently across software providers.

Rode facilitates Automated Governance in your software supply chain. This repository contains the rode API which is the primary interface between the rode UI or rode Collectors and metadata storage in Grafeas. The rode API provides functions for metadata search and storage as well as policy creation and evaluation.