Anders Eknert anderseknert

EOPA

A version of OPA designed for data heavy workloads, with data-filtering functionality included.

EOPA has been donated to the OPA community, and we invite you to take a look around.

	# In the OPA project root directory, first compile the binary
	make ci-build-linux-static

	# To build the OPA image (use whatever for your tag name)
	container build \
	--arch arm64 \
	--tag myopa.com/opa/opa:latest \
	--build-arg BASE=chainguard/glibc-dynamic \
	--build-arg BIN_DIR=_release/1.7.0-dev \
	--build-arg BIN_SUFFIX=_static \

	// Copyright 2017 The OPA Authors. All rights reserved.
	// Use of this source code is governed by an Apache2
	// license that can be found in the LICENSE file.

	package topdown

	import (
	"crypto"
	"crypto/ecdsa"
	"crypto/hmac"

	func BenchmarkBuiltinContextCopyCost(b *testing.B) {
	b.Run("withBctx", func(b *testing.B) {
	b.ResetTimer()
	b.ReportAllocs()

	for range b.N {
	bctx := BuiltinContext{}

	withBctx(bctx, "bctx")
	}

	package main

	import (
	"encoding/json"
	"fmt"
	"io"
	"os"

	"github.com/open-policy-agent/opa/v1/ast"
	"github.com/open-policy-agent/opa/v1/format"

	version: 2
	updates:
	- package-ecosystem: "github-actions"
	directory: "/"
	schedule:
	interval: "weekly"
	groups:
	dependencies:
	patterns:
	- "*"

	package google_sql_database_instance

	import rego.v1

	violations contains db_instance.id if {
	some db_instance in input.google_sql_database_instance
	not valid_db_instance(db_instance)
	}

	valid_db_instance(db_instance) if every setting in db_instance.config.settings {

	package accurics

	import rego.v1

	violations contains db_instance.id if {
	some db_instance in input.google_sql_database_instance
	some setting in db_instance.config.settings
	invalid_db_instance_setting(setting)
	}