Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0

Cedar-agent is the easiest way to deploy and run Cedar

Webhook server that evaluates WebAssembly policies to validate Kubernetes requests

Go-to CLI tool for Kubewarden users

Zed extension for the Rego policy language from Open Policy Agent (OPA)

A Kubewarden Policy that detects usage of deprecated and dropped Kubernetes resources

A Kubewarden Policy that verifies all the signatures of the container images referenced by a Pod

A Kubewarden rust policy template to be used with cargo-generate

Kubewarden Policy SDK for the Rust programming language

A Kubewarden Policy that limits the ability to create privileged containers

Crate used by Kubewarden that is able to pull policies from OCI registries and HTTP servers.

This Kubewarden Policy is a replacement for the Kubernetes Pod Security Policy that controls containers user and groups

A Kubewarden policy that restricts what registries, tags and images can pods on your cluster refer to

Replacement for the Kubernetes Pod Security Policy that controls the usage of /proc mount types

A Kubewarden Pod Security Policy that controls usage of allowPrivilegeEscalation

A Kubewarden Pod Security Policy that controls usage of AppArmor profiles

A Kubewarden Policy that detects secrets (ssh private keys, API tokens, etc) leaked via environment variables

A Pod Security Policy that controls Container Capabilities

A Kubewarden Pod Security Policy that controls usage of Seccomp profiles

Replacement for the Kubernetes Pod Security Policy that controls the usage of fsGroup in the pod security context