The Open Policy Agent (OPA, pronounced “oh-pa”) is an open source, general-purpose policy engine that unifies policy enforcement across the stack.
Conftest is a utility to help you write tests (statically analyze) against structured configuration data.
Using Conftest you can write tests for,
+ Terraform code,
+ Kubernetes Configurations
+ Dockerfile or any other config files.
Conftest uses the Rego language from Open Policy Agent for writing the assertions.