`github.com/open-policy-agent/opa`

Ecosystem:
go

Package URL:
pkg:golang/github.com/open-policy-agent/opa

Total PRs:
951 Dependabot PRs

Latest PR:
4 days ago

Unique Repositories:
250 repositories

Unique Repos (30 days):
14 repositories

Security Advisories

Denial of service in Open Policy Agent

GHSA-2m4x-4q9j-w97g CVE-2022-33082 HIGH published almost 4 years ago • updated 27 days ago

An issue in the AST parser (ast/compile.go) of Open Policy Agent v0.10.2 allows attackers to cause a Denial of Service (DoS) via a crafted input.

OPA Compiler: Bypass of WithUnsafeBuiltins using "with" keyword to mock functions

GHSA-f524-rf33-2jjr CVE-2022-36085 HIGH published over 3 years ago • updated 2 days ago

### Impact The Rego compiler provides a (deprecated) `WithUnsafeBuiltins` function, which allows users to provide a set of built-in functions that...

1.15.1 → 1.15.2 Patch PR

Open about 2 months ago 1 comment

Bump github.com/open-policy-agent/opa from 1.15.1 to 1.15.2 in /pricer

shortlink-org/shop #929

1.15.1 → 1.15.2 Patch PR

Closed 2 months ago 1 comment

[gomod] Bump the dependencies group across 3 directories with 18 updates

open-edge-platform/infra-core #943

1.14.0 → 1.14.1 Patch PR

Closed 3 months ago 1 comment

chore: bump the all-go-mod group with 2 updates

in-toto/witness #740

1.14.0 → 1.14.1 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the common group across 1 directory with 8 updates

Ericsson/trivy #238

1.13.1 → 1.13.2 Patch PR

Closed 3 months ago 1 comment

build(deps): bump the build group across 1 directory with 26 updates

open-policy-agent/eopa #294

1.12.1 → 1.12.3 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the gomod group across 1 directory with 4 updates

sigstore/cosign #4645

1.12.1 → 1.12.3 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump github.com/open-policy-agent/opa from 1.12.2 to 1.12.3

heilmela/opa-postgres-plugin #30

1.12.2 → 1.12.3 Patch PR

Closed 5 months ago 1 comment

chore: bump the all-go-mod group with 4 updates

in-toto/witness #712

1.12.2 → 1.12.3 Patch PR

Open 5 months ago 1 comment

build(deps): bump the e2e group across 1 directory with 4 updates

open-policy-agent/eopa #289

1.12.1 → 1.12.3 Patch PR

Closed 5 months ago 2 comments

build(deps): bump the e2e group across 1 directory with 3 updates

open-policy-agent/eopa #287

1.12.1 → 1.12.3 Patch PR

Closed 5 months ago 1 comment

build(deps): bump the project-dependency group across 1 directory with 7 updates

runfinch/finch-daemon #392

1.12.1 → 1.12.2 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump github.com/open-policy-agent/opa from 1.12.1 to 1.12.2

flipt-io/flipt #5265

1.12.1 → 1.12.2 Patch PR

Open 5 months ago 1 comment

build(deps): bump github.com/open-policy-agent/opa from 1.12.1 to 1.12.2 in the project-dependency group

runfinch/finch-daemon #387

1.12.1 → 1.12.2 Patch PR

Closed 5 months ago 1 comment

build(deps): bump the all group across 1 directory with 7 updates

open-policy-agent/opa-control-plane #228

1.12.0 → 1.12.1 Patch PR

Closed 5 months ago 1 comment

build(deps): bump github.com/open-policy-agent/opa from 1.10.0 to 1.10.1 in /opafiber

arielsrv/contrib #109

1.10.0 → 1.10.1 Patch PR

Open 7 months ago 2 comments

build(deps): bump github.com/open-policy-agent/opa from 1.10.0 to 1.10.1 in /v3/opa

gofiber/contrib #1454

1.10.0 → 1.10.1 Patch PR

Closed 7 months ago 1 comment

Bump github.com/open-policy-agent/opa from 1.7.0 to 1.7.1

cloudposse/atmos #1391

1.7.0 → 1.7.1 Patch PR

Closed 10 months ago 4 comments

Bump github.com/open-policy-agent/opa from 1.7.0 to 1.7.1

spiffe/spire #6224

1.7.0 → 1.7.1 Patch PR

Merged 10 months ago

chore(deps): bump the common group across 1 directory with 3 updates

aquasecurity/trivy-checks #440

1.5.0 → 1.5.1 Patch PR

Open 12 months ago

build(deps): bump github.com/open-policy-agent/opa from 1.5.0 to 1.5.1

tomsaway/poutine #9

1.5.0 → 1.5.1 Patch PR

Open 12 months ago

chore(deps): bump the common group with 2 updates

aquasecurity/trivy-checks #437

1.5.0 → 1.5.1 Patch PR

Open about 1 year ago

chore(deps): bump github.com/open-policy-agent/opa from 1.5.0 to 1.5.1

heilmela/opa-postgres-plugin #8

1.5.0 → 1.5.1 Patch PR

Open about 1 year ago

Bump github.com/open-policy-agent/opa from 1.5.0 to 1.5.1

open-policy-agent/opa-docker-authz #116

1.5.0 → 1.5.1 Patch PR

Merged about 1 year ago

Bump github.com/open-policy-agent/opa from 1.5.0 to 1.5.1

cloudposse/atmos #1288

1.5.0 → 1.5.1 Patch PR

Open about 1 year ago 4 comments

Bump the dependencies group with 4 updates

mpapenbr/iracelog-service-manager-go #285

1.5.0 → 1.5.1 Patch PR

Merged about 1 year ago

Bump github.com/open-policy-agent/opa from 1.5.0 to 1.5.1

zregvart/opa-inspect-js #346

1.5.0 → 1.5.1 Patch PR

Open about 1 year ago

build(deps): bump github.com/open-policy-agent/opa from 1.5.0 to 1.5.1

open-policy-agent/conftest #1137

1.5.0 → 1.5.1 Patch PR

Merged about 1 year ago

Bump github.com/open-policy-agent/opa from 1.5.0 to 1.5.1

spiffe/spire #6107

1.5.0 → 1.5.1 Patch PR

Merged about 1 year ago

build(deps): bump github.com/open-policy-agent/opa from 1.5.0 to 1.5.1

opencloud-eu/opencloud #1000

1.5.0 → 1.5.1 Patch PR

Merged about 1 year ago 2 comments

build(deps): bump github.com/open-policy-agent/opa from 1.5.0 to 1.5.1

open-policy-agent/opa-envoy-plugin #718

1.5.0 → 1.5.1 Patch PR

Merged about 1 year ago

chore: Bump github.com/open-policy-agent/opa from 1.4.0 to 1.4.2

ratify-project/ratify #2249

1.4.0 → 1.4.2 Patch PR

Merged about 1 year ago

chore(deps): bump github.com/open-policy-agent/opa from 1.4.0 to 1.4.2

flipt-io/flipt #4216

1.4.0 → 1.4.2 Patch PR

Merged about 1 year ago 1 comment

chore: bump github.com/open-policy-agent/opa from 1.4.0 to 1.4.2

in-toto/go-witness #495

1.4.0 → 1.4.2 Patch PR

Merged about 1 year ago

chore: Bump github.com/open-policy-agent/opa from 1.4.0 to 1.4.2

ratify-project/ratify #2232

1.4.0 → 1.4.2 Patch PR

Merged about 1 year ago 1 comment

chore(deps): bump github.com/open-policy-agent/opa from 1.4.0 to 1.4.2 in the security group

replicatedhq/kots #5319

1.4.0 → 1.4.2 Patch PR

Merged about 1 year ago

chore(deps): bump the common group across 1 directory with 2 updates

aquasecurity/trivy-checks #408

1.4.0 → 1.4.2 Patch PR

Merged about 1 year ago

[gomod] Bump the go_modules group across 2 directories with 1 update

open-edge-platform/infra-core #112

1.4.0 → 1.4.2 Patch PR

Merged about 1 year ago 1 comment

build(deps): bump the go group with 3 updates

pomerium/ingress-controller #1157

1.4.0 → 1.4.2 Patch PR

Open about 1 year ago 2 comments

Bump github.com/open-policy-agent/opa from 1.4.0 to 1.4.2

spiffe/spire #6046

1.4.0 → 1.4.2 Patch PR

Open about 1 year ago 1 comment

chore(deps): bump github.com/open-policy-agent/opa from 1.4.0 to 1.4.2

sigstore/cosign #4167

1.4.0 → 1.4.2 Patch PR

Merged about 1 year ago

Bump github.com/open-policy-agent/opa from 0.49.0 to 0.49.2 in /tools

sargassum-world/godest #48

0.49.0 → 0.49.2 Patch PR

Closed over 3 years ago 2 comments

Package Details

Name:	`github.com/open-policy-agent/opa`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/open-policy-agent/opa`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 3

MODERATE 2

View All golang Advisories

Package Information

Description:

Repository:	https://github.com/open-policy-agent/opa
Homepage:	https://github.com/open-policy-agent/opa
Latest Release:	`v0.68.0` almost 2 years ago
Dependent Repos:	2,039
Dependent Packages:	852
Ranking:	Top 0.1832% by dependent repos Top 0.1401% by dependent pkgs

PR Status

Open 425 (44.7%)

Merged 76 (8.0%)

Closed 369 (38.8%)

PR Types

Major 259 (27.3%)

Minor 568 (59.8%)

Patch 42 (4.4%)

github.com/open-policy-agent/opa

Security Advisories

Denial of service in Open Policy Agent

OPA Compiler: Bypass of WithUnsafeBuiltins using "with" keyword to mock functions

OPA for Windows has an SMB force-authentication vulnerability

Incorrect Calculation in github.com/open-policy-agent/opa

Out of bounds memory access in github.com/open-policy-agent/opa

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

5

Package Information

PR Status

PR Types

`github.com/open-policy-agent/opa`