kyverno / kyverno
Unified Policy as Code
kyverno / kyverno
permitio / opal
Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)
cerbos / cerbos
Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.
octelium / octelium
A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.
kptdev / kpt
Automate Kubernetes Configuration Editing
aws-cloudformation / cloudformation-guard
Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0
safedep / vet
Protect against malicious open source packages 🤖
open-policy-agent / awesome-opa
A curated list of OPA related tools, frameworks and articles
decionis / agent-safe-pipeline
An execution-authority gateway for AI agents and APIs. It intercepts consequential HTTP actions, asks Decionis whether they are authorized, and forwards exactly the authorized request once on a single-use grant, holds it for a person, or refuses it, leaving chained evidence of each. Installs by Homebrew, Linux package, Docker or Helm.
KimGLee / Cambium
Governance standard and reference toolset for LLM-maintained knowledge corpora
chainloop-dev / chainloop
Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Signed records of what your AI coding agents and CI/CD pipelines did, checked against policies as code, with the loop closed in CI/CD. AI sessions, SBOMs, VEX, SARIF and SLSA provenance, built on Sigstore and in-toto. Apache 2.0.
Azure / enterprise-azure-policy-as-code
Enterprise Azure Policy-as-Code (EPAC) solution
globalbao / awesome-azure-policy
A curated list of blogs, videos, tutorials, code, tools, scripts, and anything useful to help you learn Azure Policy - by @JesseLoudon
mkbhardwas12 / purposemesh
Purpose-bound authorization reference: RBAC + ABAC + ReBAC, row/field controls, fidelity gates, lifecycle governance, and a tested 100K synthetic-data path.
miniforge-ai / miniforge
miniforge is an autonomous software development system designed to behave like a factory, not a chatbot
gnt-ai / gnt
Checks every AI agent action against your company's real rules before it runs. Git-native, PR-reviewed.
skalenetwork / microsandbox-reef
Run OpenClaw, Hermes and your own agents in microsandbox microVMs. One reviewable TOML role sets image, allowed domains and host-bound secrets. No daemon.