A curated list of policy-as-code resources like blogs, videos, and tools to practice on for learning Policy-as-Code.
☆205Dec 6, 2023Updated 2 years ago
Alternatives and similar repositories for awesome-policy-as-code
Users that are interested in awesome-policy-as-code are comparing it to the libraries listed below
Sorting:
- A curated list of Software Component Analysis (SCA) books, courses - free and paid, videos, tools, and tutorials.☆111Nov 26, 2024Updated last year
- An OPA library to develop IT Control policies, for the IBM Cloud☆17Sep 26, 2022Updated 3 years ago
- A curated list of OPA related tools, frameworks and articles☆865Jan 16, 2026Updated last month
- Security Alert Decoration☆27Jul 21, 2025Updated 7 months ago
- OPA Dependency Manager (ODM)☆12Jun 17, 2024Updated last year
- A curated list of Falco related tools, frameworks, blogs, podcasts, and articles☆202Jul 28, 2021Updated 4 years ago
- Documenting your Threat Models with HCL☆454Mar 1, 2026Updated last week
- Compares and analyzes GCP IAM roles.☆78Mar 9, 2025Updated last year
- Create Kubernetes AdmissionReview requests from Kubernetes resource manifests☆159Mar 1, 2026Updated last week
- CLI for searching Rego policies☆105Feb 5, 2022Updated 4 years ago
- Enable Falco to read audit logs from EKS☆11Dec 13, 2020Updated 5 years ago
- A policy management tool for interacting with Gatekeeper☆391Nov 20, 2025Updated 3 months ago
- ☆12Oct 17, 2023Updated 2 years ago
- 🖥️ 👓 Monitor your OPA Gatekeeper via Grafana Dashboard☆14Dec 17, 2020Updated 5 years ago
- Provides a prometheus exporter for monitoring aspects secrets stored on a running HashiCorp Vault server☆32Oct 21, 2023Updated 2 years ago
- A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for …☆1,719Aug 2, 2024Updated last year
- This is just a proof-of-concept project that aims to sign and verify container images using cosign and OPA (Open Policy Agent)☆63Aug 4, 2021Updated 4 years ago
- ☆20Nov 22, 2023Updated 2 years ago
- A tool that allows downloading S3 directories as ZIP files☆34Apr 28, 2023Updated 2 years ago
- A simple tool for converting Rego (OPA) rule into command.☆30Jun 1, 2022Updated 3 years ago
- A GitHub Actions Supply Chain CTF / Goat☆26Jan 6, 2026Updated 2 months ago
- The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.☆131Feb 12, 2026Updated 3 weeks ago
- Rego policies for enterprise-scale Compliance-as-Code with OPA Conftest.☆60Oct 19, 2023Updated 2 years ago
- Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets☆833Mar 28, 2025Updated 11 months ago
- Open source compliance tool for development platforms.☆285Oct 30, 2023Updated 2 years ago
- This project is no longer maintained. There's a successor at https://github.com/zeek-packages/zeek-agent-v2☆14Oct 12, 2020Updated 5 years ago
- An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchm…☆769Dec 11, 2024Updated last year
- Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego☆350Mar 21, 2025Updated 11 months ago
- Fugue Rego Toolkit☆235Jun 30, 2022Updated 3 years ago
- A curated list for Awesome Kubernetes Security resources☆1,993Mar 1, 2026Updated last week
- Redis Security Map - Anti-hacking for Redis☆31Mar 11, 2022Updated 3 years ago
- ☆117Feb 11, 2026Updated 3 weeks ago
- OWASP Foundation Web Respository☆601Updated this week
- Terraform templates for CI/CD to Cloud federation and Cloud2Cloud IAM federations☆67Jan 4, 2026Updated 2 months ago
- Centralizing AWS CloudWatch log forwarding via EventBridge and Step Functions☆48Feb 12, 2023Updated 3 years ago
- A Golang program to rotate AWS & GCP account keys☆67May 12, 2025Updated 9 months ago
- Watch your in cluster Kubernetes manifests for OPA policy violations and export them as Prometheus metrics☆50Jul 4, 2023Updated 2 years ago
- This repository includes cloud security policies for IaC and live resources.☆40Nov 26, 2025Updated 3 months ago
- Add comments to pull requests where tfsec checks have failed☆170Sep 20, 2023Updated 2 years ago