DEdersch·Dec 19, 2025
I would like to put in an honourable mention for Open Policy Agent: https://github.com/open-policy-agent/opa
In Top Open Source Authorization Libraries (2024)open-policy-agent
opa
Go2018–2025
open-policy-agent / opa
opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
12Distinct people
12Mentions
0Explicit recommenders
12.5KGitHub stars
What to know before exploring
What it is
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
GitHub
Where it is used
- loveholidays — “They use Conftest / OPA as part of their Kubernetes and Terraform pipelines, enabling them to enforce best practices as a platform team (check out …” Source
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 8–Nov 15 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/15/2026, 8:03:49 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year12 dated mentions
Observed mentions: 2018-05-19 19:55:16 UTC to 2025-12-19 08:57:54 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 2 | 1 | 1 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 2 | 1 | 1 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 3 | 1 | 2 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2025 | 2025-01-01 00:00:00 UTC | 2026-01-01 00:00:00 UTC | 2 | 1 | 1 |
What Hacker News says
2 sourcesShow HN: Infrabase: Natural language rules engine to manage your cloud account
Policy-as-code is one of those things that everyone knows should be done, but in practice is rarely implemented.
We believe this is caused by the combination of the following 2 factors:
- OPA [1] and tools like cloud custodian [2] are cumbersome to set up, so writing even a single policy/ setting it up in your organisation takes a lot of effort.
- Each policy project needs to start from scratch because policies aren't re-usable
Infrabase checks your infra with an LLM instead of policies directly (currently a combination of gemini-2.5-pro-preview-05-06 and o4-mini). You can write your own policies as natural language [3] prompts to customize behaviour.
This is still early: non-determinism and latency are open problems. But for most teams, “some guard-rails today” beats “perfect rego never”, and llm's are only getting better.
We'd love your
Read the rest
feedback on it!
[1] OPA: https://github.com/open-policy-agent/opa
[2] Cloud Custodian: https://github.com/cloud-custodian/cloud-custodian
[3] Infrabase Rules Repo: https://github.com/diggerhq/infrabase-rules