Open Policy Agent (OPA)

@openpolicyagent@infosec.exchange
25 Followers
12 Following
38 Posts
Unified policy enforcement across the whole cloud native stack!
Websitehttps://www.openpolicyagent.org/
Slackhttps://inviter.co/opa
LinkedInhttps://www.linkedin.com/company/open-policy-agent

Building #Regal’s linter rules in #Rego really pushed the language to its limits some years back, and both OPA and Rego have improved a lot thanks to that. Building parts of its *language server* in Rego too was perhaps taking it too far, but OTOH, the LSP is really just JSON in and JSON out, which is what OPA does best after all.

The bundled policies in Regal are normally embedded in the binary. That’s great for distribution, but kinda sucks for development as any change requires compilation. Not anymore! Today I merged some work of mine allowing live-reloading of the language server policies, and it’s such a *huge* difference seeing the result of a change a second after you made it. The video here shows live-editing of a LSP code action policy, and how adding a new “source action” item in the server immediately propagates to the client. Sooo much fun!

"Our policy as code, temporarily disable OPA" 🤣

I guess that means we've made it.

https://www.youtube.com/watch?v=rXPpkzdS-q4

Interview with Senior DevOps engineer 2025

YouTube

Anyone going to https://events.linuxfoundation.org/open-source-summit-europe/ ? If you want to talk about #opa or #backstage I love yappin about both 🤓

#oss #opensource

Open Source Summit Europe | LF Events

The premier vendor-neutral conference for open source developers and technologists to collaborate, share information and learn about the latest technologies and innovations across open source.

LF Events

OPA v1.6.0 is out now!

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

- Improvements to the OPA website and documentation
- Allowing keywords in Rego references
- Parallel test execution
- Faster built-in function execution

See the full release notes here for more details.

As always, a huge thanks to all of our contributors!

https://github.com/open-policy-agent/opa/releases/tag/v1.6.0

Release v1.6.0 · open-policy-agent/opa

This release contains a mix of new features, performance improvements, and bugfixes. Notably: Improvements to the OPA website and documentation Allowing keywords in Rego references Parallel test e...

GitHub

"With this release, you can write and enforce policies that require deployed workloads to include specific attestations, such as build provenance, an SBOM, or any custom attestation. This integration helps you automate and enforce security and compliance requirements in Kubernetes by blocking untrusted or non-compliant images before deployment."

https://github.blog/changelog/2025-06-23-enforce-admission-policies-with-artifact-attestations-in-kubernetes-using-opa-gatekeeper/

Enforce admission policies with artifact attestations in Kubernetes using OPA Gatekeeper - GitHub Changelog

We’ve released support for enforcing GitHub Artifact Attestations in OPA Gatekeeper, an open source admission controller for Kubernetes, in public preview. With this release, you can write and enforce policies…

The GitHub Blog

"By leveraging Open Policy Agent, we built a scalable and secure authorization platform tailored to the diverse needs of our services. The platform enhances developer productivity with robust tooling, enforces consistent security standards, and offers comprehensive audit capabilities, all while minimizing onboarding effort."

👏

https://medium.com/agoda-engineering/how-agoda-solved-authorization-at-scale-with-opa-66a04015191f

How Agoda Solved Authorization at Scale with OPA - Agoda Engineering & Design - Medium

At Agoda, we operate over 3000+ services built on diverse technologies (Scala, .NET /.NET Core, Java, Kotlin, Go, Python) that communicate both internally and externally. Protecting the resources…

Agoda Engineering & Design

🚨 Security doesn't start in prod — it starts at terraform plan.

With Policy as Code tools like #OPA, #Checkov, Snyk, and #Sentinel by HashiCorp, you can catch misconfigs before they deploy. 🛡️

🎥 https://youtube.com/shorts/C-2OJMFVz8c

#Terraform #HashiCorp #DevSecOps #PolicyAsCode

Before you continue to YouTube

Introducing Swift OPA, which allows you to keep service policies decoupled from service code, giving your security and compliance teams the flexibility they need to manage services built in Swift. https://blog.openpolicyagent.org/introducing-swift-opa-native-policy-evaluation-for-swift-d5136c8a662e @openpolicyagent
Introducing Swift OPA: Native Policy Evaluation for Swift

Exciting news — Swift OPA, a new way to integrate OPA natively within Swift applications and services, has now been released. Swift OPA builds on the robust foundation of OPA’s Intermediate…

Open Policy Agent

A new version of #Regal is out! v0.34.0 of the #OPA community's favorite linter and language server brings you 3 new linter rules, much faster linting, and many improvements and fixes. And all for the price of nothing! Check out the release notes, get your copy and get linting!

https://github.com/StyraInc/regal/releases/tag/v0.34.0

Release v0.34.0 · StyraInc/regal

After a month of development, we're happy to announce Regal v0.34. This version of the OPA community's favorite linter and language server brings you new 3 linter rules, performance improvements an...

GitHub

We’ve been hard at work on a new website to better showcase OPA. It’s out now - you should take a look around! https://www.openpolicyagent.org/

The new site is designed to streamline community contributions to the documentation while adding some new functionality too. It’s exciting, but we’re just getting started! This also sets the foundations bigger improvements in the months to come. Stay tuned 📻

Open Policy Agent - Homepage | Open Policy Agent