open-policy-agent
Safeguard articles tagged "open-policy-agent" — guides, analysis, and best practices for software supply chain and application security.
6 articles
Rego for intermediates: combining rules with AND/OR and writing actionable error messages
Rego has no `&&` or `||` operators — AND is implicit, OR means writing the same rule twice, and most teams miss both until a policy silently passes.
Introduction to Open Policy Agent and Rego
A concrete walkthrough of Open Policy Agent and Rego — how OPA evaluates decisions, a runnable policy example, and where it fits in supply chain security.
How to write a custom Snyk IaC rule in Rego using the Rul...
A technical walkthrough of Snyk's IaC Rules SDK: scaffolding, writing Rego deny rules, local testing, bundling, and org-wide enforcement via OCI registries.
How Snyk IaC's custom rule SDK structures resource-attrib...
A technical look at how Snyk IaC's Rego-based SDK normalizes Terraform, CloudFormation, Kubernetes, and ARM into one resource-attribute query model.
OPA Policy Language: A Practical Guide to Rego
The OPA policy language is Rego, a declarative language for writing authorization and admission-control rules that live outside your application code. Here's how it works and how to keep it secure.
Rego Policy Language: How OPA Turns Rules Into Code
Rego is the declarative policy language behind Open Policy Agent. This guide explains how it works, where it fits in a security pipeline, and how to write policies you can trust.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.