Awesome Open

Project record

Open Policy Agent

Open Policy AgentGeneral-purpose policy engine.Apache-2.0
Field notes / 046Open Policy Agent
I / Function

General-purpose policy engine.

Open Policy Agent evaluates policy decisions separately from application code. Services submit queries against declarative Rego rules and data, then use the results to enforce decisions such as API access or resource placement. Developers can run OPA through its command-line tool or container images, integrate it through a REST API, or embed policy evaluation using its Go interfaces.

Open Policy Agent README · Reviewed 2026-10-28

An oxblood caliper holds shaped pebbles against fitted ceramic gauges beneath an adjustable jaw.
Awesome Open* · Field recordOpen Policy AgentOP-8AB59E31 · Folio 046Domain: Infrastructure & DevOps
  1. 01 / Feature noteRego policy rules

    Express policy decisions as declarative rules evaluated against data and queries.

    Feature source ↗
  2. 02 / Feature noteApplication decision queries

    Let services request policy decisions instead of embedding the decision logic in each service.

    Feature source ↗
II / Repository record

GitHub stars

12,426

Detected license

Apache-2.0

Repository created

2015-12-28

Repository push

2026-11-04

III / Observations & evidence

GitHub stars

Unknown

i
Window mismatch; awaiting refresh

Cached history uses a different month window; chart withheld until aligned.

Latest attempt: ok · Checked 2026-10-15T19:40:39.600225+00:00 · Last successful fetch 2026-10-15T19:40:39.600225+00:00 · Provider source

Hacker News stories

Unknown

i
Not recorded

OpenSSF Scorecard

8.2/10

Scanned 2026-11-02 · 16 scored / 18 returned

i
Partial
  • Maintained · 10/10

    30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10

  • Code-Review · 10/10

    all changesets reviewed

  • Dependency-Update-Tool · 10/10

    update tool detected

  • Packaging · Inconclusive

    packaging workflow not detected

  • Dangerous-Workflow · 10/10

    no dangerous workflow patterns detected

  • Security-Policy · 9/10

    security policy file detected

  • Token-Permissions · 9/10

    detected GitHub workflow tokens with excessive permissions

  • Binary-Artifacts · 9/10

    binaries present in source code

  • License · 10/10

    license file detected

  • Pinned-Dependencies · 9/10

    dependency not pinned by hash detected -- score normalized to 9

  • CII-Best-Practices · 5/10

    badge detected: Passing

  • Vulnerabilities · 5/10

    5 existing vulnerabilities detected

  • Signed-Releases · 0/10

    Project has not signed or included provenance with any releases.

  • Fuzzing · 10/10

    project is fuzzed

  • Branch-Protection · Inconclusive

    internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md

  • SAST · 7/10

    SAST tool detected but not run on all commits

  • CI-Tests · 10/10

    29 out of 29 merged PRs checked by a CI test -- score normalized to 10

  • Contributors · 10/10

    project has 29 contributing companies or organizations

Repository commit 2a11e81496cd · Scorecard v5.6.0

Checked 2026-11-03T07:55:50Z · Last successful fetch 2026-11-03T07:55:50Z · Value fetched 2026-11-03T07:55:50Z · Provider source

IV / Release record

GitHub release

v1.22.0

Published 2026-10-29

i
Available

Checked 2026-11-04T04:04:05Z · Last successful fetch 2026-11-04T04:04:05Z · Value fetched 2026-11-04T04:04:05Z · Provider source

V / Where it runs

Unknown

i
Not reviewed