policy-as-code

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Automate Kubernetes Configuration Editing

PacBot (Policy as Code Bot)

Policy and data administration, distribution, and real-time updates on top of Open Policy Agent

Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules.

A data standard to enable right-of-way regulation and two-way communication between mobility companies and local governments.

A curated list of OPA related tools, frameworks and articles

A curated list of blogs, videos, tutorials, code, tools, scripts, and anything useful to help you learn Azure Policy - by @jesseloudon

Style guide for Rego

MagTape Policy-as-Code for Kubernetes

Bicep and Terraform code examples for policy-as-code workflows. Azure governance guardrails and automation - by @jesseloudon

A curated list of policy-as-code resources like blogs, videos, and tools to practice on for learning Policy-as-Code.

An open source, cloud-native security and policy project

Webhook server that evaluates WebAssembly policies to validate Kubernetes requests

Manage admission policies in your Kubernetes cluster with ease

A linting tool that helps you to write better Chef Infra cookbooks and InSpec profiles by detecting and automatically correcting style, syntax, and logic mistakes in your code.

Create Kubernetes AdmissionReview requests from Kubernetes resource manifests

Build flexible & composable abstractions for all your platform engineering tools.

Hexa Policy Orchestrator enables you to manage all of your access policies consistently across software providers.

INTERCEPT / Policy as Code Static Analysis Auditing / SAST