CtrlK
BlogDocsLog inGet started
Tessl Logo

nicholasjackson/opa-rego-language

Rego is the declarative policy language used by Open Policy Agent (OPA). This tile covers writing and testing Rego policies for Kubernetes admission control, Terraform and infrastructure-as-code plan validation, Docker container authorization, HTTP API authorization, RBAC and role-based access control, data filtering, metadata annotations with opa inspect, and OPA policy testing with opa test.

99

1.19x

Quality

Pending

Does it follow best practices?

Impact

99%

1.19x

Average score across 31 eval scenarios

SecuritybySnyk

Pending

The risk profile of this skill

Overview
Eval results
Files

rubric.jsonevals/scenario-30/

{
  "context": "Evaluates whether the agent follows Regal naming conventions: snake_case identifiers (prefer-snake-case), no get_/list_ prefixes (avoid-get-and-list-prefix), and no repetition of the package path in rule names (rule-name-repeats-package).",
  "type": "weighted_checklist",
  "checklist": [
    {
      "name": "snake_case for all identifiers",
      "description": "All rule names, function names, and variable names use snake_case — no camelCase (e.g. `userRole`, `isAdmin`) or PascalCase",
      "max_score": 35
    },
    {
      "name": "No get_ or list_ prefix on rule names",
      "description": "No rule or function is named with a `get_` or `list_` prefix (e.g. `get_user_role`, `list_permissions`) — the value itself is the rule name",
      "max_score": 30
    },
    {
      "name": "No package path repetition in rule names",
      "description": "Rules do not repeat the package path — in `rbac.authz`, the allow rule is named `allow` not `rbac_authz_allow` or `authz_allow`",
      "max_score": 10
    },
    {
      "name": "Tests pass",
      "description": "All tests pass when running `opa test . -v`",
      "max_score": 25
    }
  ]
}

README.md

rules.md

tile.json