-
Right now there is a `Makefile` and `test.sh` available for PSP policies to execute unit tests for Rego policies. But this seems outdated or needs to be updated.
Write global makerule to run `src_t…
-
---
# bug: Accessing Rego Policies from Different Drives in Windows
Not able to access Rego policies from another drive in Windows. Error occurs while integrating with Golang.
**Example:*…
-
## Short description
upgrading opa from version v0.66.0 to v0.67.0 can cause performance hits due to the solution in #6846.
imagine this policy:
```rego
package smth.authz
import data.use…
-
## Short description
The `inspect` command does not detect undefined functions directly called in a rule, but it does detect them in a list comprehension.
Opa: 0.67.1
## Steps To Reproduce
Fi…
-
## Description
After #7417 Trivy starts slower.
```bash
➜ git checkout a5aa63eff7e229744090f9ad300c1bec3259397e
Previous HEAD position was 39c80248b chore(deps): Bump trivy-checks (#7417)
HEAD is…
-
From the docs, this should be supported:
> Pointers must refer to object keys. Pointers to array elements will be treated as undefined. For example /input/emails/0/value is allowed but /input/email…
-
## Description
Even when the misconfiguration scanner is disabled, some warnings are shown.
```
$ trivy image alpine:3.19 --scanners vuln
2024/08/30 18:16:35 WARN Check ID is empty file_path=lib…
-
# 💡 Summary #
Change the default value for `OutRegoFileName` from `TestResults` to `RegoOutput`.
## Motivation and context ##
- With the current default value, it isn't clear to users what the pu…
-
Hi,
I wonder if we can use GitOps with ReBAC and if we can have an example.
Cheers
-
Currently policy code is stateless. It would be helpful to add state to it. Having state would allow us to validate things like:
1. Pod sanbox name. See https://github.com/kata-containers/kata-contai…