Go
kyverno/kyverno
Unified Policy as Code
Apache-2.02026年8月28日 · 指标 2.10.0
全部标签
目录标签
#policy-as-code
公开记录中带有此标签的全部仓库——标签来自其 GitHub 主题或软件包注册表发布的关键词。健康度量遵循与记录其余部分相同的版本化方法论。
30 条记录
Go · npm
kptdev/kpt
Automate Kubernetes Configuration Editing
Apache-2.02026年9月18日 · 指标 2.10.0
Go · crates.io
kubewarden/adm-controller
Manage admission policies in your Kubernetes cluster with ease
Apache-2.02026年9月19日 · 指标 2.10.0
Go
mondoohq/cnspec
An open source, cloud-native security to protect everything from build to runtime
自定义许可证2026年10月17日 · 指标 2.10.0
Go · npm
open-policy-agent/regal
Regal is a linter and language server for Rego, bringing your policy development experience to the next level!
Apache-2.02026年9月13日 · 指标 2.10.0
Go · npm
safedep/vet
Protect against malicious open source packages 🤖
Apache-2.02026年9月19日 · 指标 2.10.0
crates.io
microsoft/regorus
Regorus - A fast, lightweight Rego (OPA policy language) interpreter written in Rust.
自定义许可证2026年9月13日 · 指标 2.10.0
crates.io · npm · PyPI
aws-cloudformation/cloudformation-guard
Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0
Apache-2.02026年10月20日 · 指标 2.10.0
PyPI · Go · npm
preloop/preloop
The open-source AI agent control plane: MCP firewall, model gateway with budgets, human approvals, runtime observability, and audit trails
Apache-2.02026年9月18日 · 指标 2.10.0
PyPI · crates.io
Rul1an/assay
Open evidence profile for MCP tool actions. Enforce configured tool-call policies and record decisions and observations in offline-verifiable bundles. Optional Linux kernel controls. No hosted backend required.
MIT2026年10月13日 · 指标 2.10.0
RubyGems · Go
chef/cookstyle
A linting tool that helps you to write better Chef Infra cookbooks and InSpec profiles by detecting and automatically correcting style, syntax, and logic mistakes in your code.
Apache-2.02026年9月11日 · 指标 2.10.0
PyPI
mcp-hangar/mcp-hangar
MCP policy enforcement plane — deterministic policy on every Model Context Protocol call: identity, RFC 8707 audience binding, tool schema digest pinning, full audit trail. Python, self-hosted, MIT.
MIT2026年9月21日 · 指标 2.10.0
npm
GRCEngClub/claude-grc-engineering
Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.
自定义许可证2026年9月16日 · 指标 2.10.0
npm
cdklabs/cdk-validator-cfnguard
该仓库未发布描述。
Apache-2.02026年10月21日 · 指标 2.10.0
Go · npm · PyPI
mattrobinsonsre/terrapod
Open-source Terraform Enterprise replacement
MPL-2.02026年10月20日 · 指标 2.10.0
Go
octelium/octelium
A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.
AGPL-3.02026年9月19日 · 指标 2.10.0
npm
open-policy-agent/vscode-opa
An extension for VS Code which provides support for OPA and the Rego policy language
Apache-2.02026年9月11日 · 指标 2.10.0
crates.io · PyPI
permitio/PDP
Permit Policy Decision Point service. High-performance, policy-driven authorization for your apps and service.
Apache-2.02026年9月20日 · 指标 2.10.0
—
pulumi/pulumi-policy
Pulumi's Policy as Code SDK, CrossGuard. Define infrastructure checks in code to enforce security, compliance, cost, and other practices, enforced at deployment time.
Apache-2.02026年9月12日 · 指标 2.10.0
npm
Keesan12/martin-loop
Make AI coding agents safe to scale autonomously: assign work, cap spend, enforce policy, verify output, roll back failures, learn from loops, and prove ROI across every repo.
Apache-2.02026年9月11日 · 指标 2.10.0
Go
Terfyn/terfyn
A runtime for reliable multi-agent systems with durable workflows, resumable execution, and human-in-the-loop control
Apache-2.02026年9月17日 · 指标 2.10.0
Go
dativo-io/talon
Control plane for company AI use cases — one self-hosted operating layer for shared budgets, policies, reliability, and session understanding, with verifiable evidence. EU-friendly: self-host, PII controls, data residency.
Apache-2.02026年9月10日 · 指标 2.10.0
Go
idriss-eliguene/landlock-genprof
Automatic Kubernetes security profile generator — Landlock, NetworkPolicy, seccomp, and Linux capabilities — built on observation of a running pod, not manual rule authoring.
Apache-2.02026年10月21日 · 指标 2.10.0
Go
farcloser/limen
Every rule written, verifiable, enforceable: limen checks, fixes, and bootstraps Farcloser repositories — mandatory files, pinned tooling, GitHub settings.
MIT2026年9月6日 · 指标 2.10.0
Go · PyPI
RudrenduPaul/TenantGuard
Tenant-isolation security scanner for self-hosted multi-tenant AI-agent platforms. SARIF, JSON, and MCP output.
Apache-2.02026年9月8日 · 指标 2.10.0
Hex
aryaminus/controlkeel
Agent control plane for governed AI coding: validate changes, enforce policy gates, track findings, proofs, and evals based on your habits.
自定义许可证2026年9月9日 · 指标 2.10.0
npm
lee77840/omniconductor
One workflow framework, every coding agent. Install your AI-coding discipline into Claude Code, Cursor, GitHub Copilot, Gemini CLI, Codex, and Windsurf from one tool-agnostic core. Apache 2.0.
Apache-2.02026年9月13日 · 指标 2.10.0
npm
glogos-org/agent-onboard
A tiny CLI for onboarding Humans and AI agents into target repositories with machine-readable project boundaries.
Apache-2.02026年8月22日 · 指标 2.10.0
npm
mwashburn160/pipeline-builder
Self-hosted platform for deploying and running software factories on AWS: secure delivery pipelines, a signed supply chain, policy-as-code compliance and multi-tenant governance — in minutes, not months.
Apache-2.02026年10月21日 · 指标 2.10.0
Go
Mrg77/tfforge
An AI agent that builds, validates & secures Terraform — with a policy-as-code guard it can't bypass. Built from scratch on the Anthropic API.
MIT2026年10月19日 · 指标 2.10.0