Open Policy Agent (OPA) is an open source, general-purpose policy engine.

Prevent Kubernetes misconfigurations from reaching production (again 😤 )! From code to cloud, Datree provides an E2E policy enforcement solution to run automatic checks for rule violations. See our docs: https://hub.datree.io

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

The corrective bash syntax highlighter

Generate a customized Privacy Policy and Terms of Use document for your mobile apps

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

🐊 Policy Controller for Kubernetes

FreeRADIUS - A multi-protocol policy server.

KCL Programming Language Core and API (CNCF Sandbox Project). https://kcl-lang.io

GitHub's employee intellectual property agreement, open sourced and reusable

Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Collaborative development on GitHub's site policies, procedures, and guidelines

A proposed standard that allows websites to define security policies.

Repository for Azure Resource Policy built-in definitions and samples

Meaningful control of data in distributed systems.

Mirror of FreeIPA, an integrated security information management solution

building a chinese dialogue system based on the newest version of rasa(基于最新版本rasa搭建的对话系统)

A GitHub App that enforces approval policies on pull requests

Project Calico's per-host agent Felix, responsible for programming routes and security policy.

Pike is a tool for determining the permissions or policy required for IAC code

OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications

Systematic dataset of Covid-19 policy, from Oxford University

📚 The OPA Gatekeeper policy library

Awesome papers involving LLMs in Social Science.

Heterogeneous Pre-trained Transformer (HPT) as Scalable Policy Learner.

Tool and policy library for reviewing Google Kubernetes Engine clusters against best practices

Open Source Data Management Software

Kubernetes tool for scanning clusters for network policies and identifying unprotected workloads.

vArmor is a cloud native container sandbox system based on AppArmor/BPF/Seccomp. It also includes multiple built-in protection rules that are ready to use out of the box.