open-policy-agent/opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
A star delta has been computed for 61,465 of 62,212 tracked repositories in this period, and only those can be ranked in it.
A repository missing here has not been measured far enough back yet. That does not mean it did not move.
Star counts measured between 09:55 and 08:10 (BKK).
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
A GitHub App that enforces approval policies on pull requests
Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).
Claude Code-style declarative permission rules for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), and workspace-path matching on the tools/pre-execute waterfall, session-log audit, and HMR reload.
Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.
A secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*https://ironcurtain.dev)
🐊 Policy Controller for Kubernetes
Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)
Mirror of FreeIPA, an integrated security information management solution
vArmor is a cloud-native container hardening system that leverages AppArmor/BPF/Seccomp and NetworkProxy technologies to enforce access control from system calls to application protocols — protecting workloads including AI Agents.
An open source, cloud-native security to protect everything from build to runtime
OTel Weaver lets you easily develop, validate, document, and deploy semantic conventions
Open Source Data Management Software
A plugin to enforce OPA policies with Envoy
The PolicyEngine US Python package contains a rules engine of the US tax-benefit system, and microdata generation for microsimulation analysis.
KCL Language Core and API
FreeRADIUS - A multi-protocol policy server.
That's all 19 repositories in this period.