policy-as-code 开源项目推荐（1,477 个）

kyverno /kyverno

Unified Policy as Code

permitio /opal

基于 Policy Agents（OPA、Cedar、...）的策略与数据管理、分发和实时更新

cerbos /cerbos

Cerbos 是一个开放核心的授权管理平台，用于为每个身份授权，并治理应用、网关、工作负载和 AI 代理中的每项操作。

octelium /octelium

新一代 FOSS 自托管统一零信任安全访问平台，可作为远程访问 VPN、ZTNA 平台、API/AI/MCP 网关、PaaS、ngrok 替代方案以及家庭实验室基础设施运行。

someengineering /fixinventory

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

kptdev /kpt

Automate Kubernetes Configuration Editing

aws-cloudformation /cloudformation-guard

Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0

tmobile /pacbot

PacBot (Policy as Code Bot)

safedep /vet

Protect against malicious open source packages 🤖

open-policy-agent /awesome-opa

精选的 OPA 相关工具、框架和文章列表

openmobilityfoundation /mobility-data-specification

一项数据规范，用于实现出行权监管、数字政策、地理围栏以及全球出行公司与公共机构之间的双向通信，适用于任何受监管的共享车辆。

opengovern /opensecurity

opensecurity: open-source security and compliance. See and secure your cloud, containers, code, networks, deployments, devices. Define your rules, get precise checks, fix gaps fast. Streamlined audits. No fluff.

decionis /agent-safe-pipeline

开源网关，在你的 AI Agent、工作流和流水线执行的每一个动作提交之前进行授权：支付、交易、价格变更、部署和 API 调用，依据 Decionis 的决定，凭一次性授权执行一次、等待人工处理或被拒绝，并附带链式证据。Homebrew、Linux、Docker、Helm。

KimGLee /Cambium

LLM 维护的知识库治理标准和参考工具集

chainloop-dev /chainloop

Agentic SDLC 基础设施。定义护栏。收集信号。持续执行。记录 AI 编码代理和 CI/CD 管道所做的操作，根据作为代码的策略进行检查，并在 CI/CD 中关闭循环。AI 会话、SBOM、VEX、SARIF 和 SLSA 证明，基于 Sigstore 和 in-toto。Apache 2.0 许可。

globalbao /awesome-azure-policy

A curated list of blogs, videos, tutorials, code, tools, scripts, and anything useful to help you learn Azure Policy - by @jesseloudon

selefra /selefra

The open-source policy-as-code software that provides analysis for Multi-Cloud and SaaS environments, you can get insight with natural language (powered by OpenAI).

mondoohq /cnspec

An open source, cloud-native security to protect everything from build to runtime

GRCEngClub /claude-grc-engineering

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

open-policy-agent /regal

Regal 是 Rego 的 linter 和语言服务器，将你的策略开发体验提升到新水平！