CtrlK
BlogDocsLog inGet started
Tessl Logo

nicholasjackson/opa-rego-language

Rego is the declarative policy language used by Open Policy Agent (OPA). This tile covers writing and testing Rego policies for Kubernetes admission control, Terraform and infrastructure-as-code plan validation, Docker container authorization, HTTP API authorization, RBAC and role-based access control, data filtering, metadata annotations with opa inspect, and OPA policy testing with opa test.

99

1.19x

Quality

Pending

Does it follow best practices?

Impact

99%

1.19x

Average score across 31 eval scenarios

SecuritybySnyk

Pending

The risk profile of this skill

Overview
Eval results
Files

rubric.jsonevals/scenario-10/

{
  "context": "Evaluates whether the agent produces a Rego policy with complete OPA metadata annotations at both package and rule level, including title, description, authors, entrypoint markers, and custom fields.",
  "type": "weighted_checklist",
  "checklist": [
    {
      "name": "package has METADATA block with title and description",
      "description": "The package declaration is preceded by a `# METADATA` comment block containing both `title:` and `description:` fields",
      "max_score": 20
    },
    {
      "name": "package has authors or organizations",
      "description": "The package-level `# METADATA` block includes an `authors:` or `organizations:` field",
      "max_score": 15
    },
    {
      "name": "decision rules have METADATA with title and description",
      "description": "Each decision rule (deny, violation, etc.) is preceded by a `# METADATA` block with `title:` and `description:` fields",
      "max_score": 20
    },
    {
      "name": "decision rules have entrypoint: true",
      "description": "Each decision rule's `# METADATA` block includes `entrypoint: true`",
      "max_score": 25
    },
    {
      "name": "rules have custom fields",
      "description": "Rule-level metadata includes a `custom:` block with at least a `severity:` field",
      "max_score": 10
    },
    {
      "name": "Tests pass",
      "description": "All tests pass when running `opa test . -v`",
      "max_score": 10
    }
  ]
}

README.md

rules.md

tile.json