conftest

Conftest Conftest 帮助您针对结构化配置数据编写测试。使用 Conftest，您可以为 Kubernetes 配置、Tekton 流水线定义、Terraform 代码、Serverless 配置或任何其他配置文件编写测试。 Conftest 使用 Open Policy Agent 的 Rego 语言来编写断言。您可以在 Open Policy Agent 文档的 Policy Language 部分了解更多关于 Rego 的信息。 以下是一个快速示例。将以下内容保存为 policy/deployment.rego： root@kitploit: package main...

gatekeeper-cve-2020-8554

针对 CVE-2020-8554 的 Gatekeeper 约束 安装 OPA 客户端 按照说明操作。 运行单元测试 root@kitploit: $ opa test --ignore=.yaml ./policies verbose output $ opa test -v --explain=full --format=pretty --ignore=.yaml ./policies...

cve-2022-33082-exploit

CVE 2022-33082 エクスプロイト 免責事項 このコードは倫理的 な目的、つまり脆弱性を理解し、自身のシステムまたは許可されたシステムをテストするために提供されています。これを使用することにより、あなたは倫理的に行動することに同意し、もし倫理的に行動しなかった場合、私は一切の責任を負いません。 このエクスプロイトはOpen Policy Agent OPA バージョン0.41.0以下で動作します。Linux上でOPAインスタンスをインストールしてテストするには、以下のコマンドを使用してください： curl -L -o opa...

opa

Open Policy Agent Open Policy Agent（OPA）是一个开源、通用策略引擎，可在整个技术栈中实现统一、上下文感知的策略执行。 OPA 很荣幸成为 Cloud Native Computing Foundation（CNCF）领域的毕业项目。详情请阅读 CNCF 公告。 开始使用 OPA 使用 Rego Playground 编写您的第一条 Rego 策略，或通过它分享您的工作以获取反馈和支持。如果您不确定从何入手，可以查看 访问控制示例。 安装 VS Code 扩展 以在本地开始使用实时诊断、调试和格式化功能。有关其他受支持的编辑器，请参阅 Editor a...

intercept

!zreadhttps://img.shields.io/badge/AskZread-.svg?style=plastic&color=00b0aa&labelColor=000000&logo=data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTYiIGhlaWdodD0iMTYiIHZpZXdCb3g9IjAgMCAxNiAxNiIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTQuOTYxNTYgMS42MDAxSDIuMjQxNTZD...

GO-2022-0574 vulnerabilities

Vulnerabilities for packages: opa...

GO-2022-0587 vulnerabilities

Vulnerabilities for packages: opa...

SUSE CVE-2026-50197

Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.10, zalando/skipper's OpenPolicyAgent integration silently bypasses request-body inspection on HTTP/1.1 Transfer-Encoding: chunked and HTTP/2 requests that omit the content-length pseudo-header, because the...

CVE-2026-65604

Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Open Policy Agent OPA deny-on-presence Rego policies. When a request body exceeds the configured maxBodyBytes limit, Skipper forwards the full payload to the upstream service while OPA evaluates against...

CVE-2026-65604

Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Open Policy Agent OPA deny-on-presence Rego policies. When a request body exceeds the configured maxBodyBytes limit, Skipper forwards the full payload to the upstream service while OPA evaluates against...

CVE-2026-65604 Skipper Incomplete Fix for CVE-2026-50197 Policy Bypass

Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Open Policy Agent OPA deny-on-presence Rego policies. When a request body exceeds the configured maxBodyBytes limit, Skipper forwards the full payload to the upstream service while OPA evaluates against...

CVE-2026-65604

Skipper has an incomplete fix for CVE-2026-50197. Oversized request bodies can bypass Open Policy Agent (OPA) deny-on-presence Rego policies because, when body size exceeds maxBodyBytes, Skipper forwards the full payload while OPA evaluates an empty parsed_body. This means policies that deny requ...

GO-2026-6019 Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies in github.com/zalando/skipper

Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies in github.com/zalando/skipper...

Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies

Summary A wrong policy can be an open door. You have to check input.attributes.request.http.truncatedbody in your policy. Description Incomplete fix for CVE-2026-50197: an oversized declared-Content-Length body still hands OPA an empty parsedbody, so deny-on-presence Rego policies fail OPEN while...

GHSA-8QQM-FP2Q-V734 Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies

Summary A wrong policy can be an open door. You have to check input.attributes.request.http.truncatedbody in your policy. Description Incomplete fix for CVE-2026-50197: an oversized declared-Content-Length body still hands OPA an empty parsedbody, so deny-on-presence Rego policies fail OPEN while...

CVE-2026-50197

Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.10, zalando/skipper's OpenPolicyAgent integration silently bypasses request-body inspection on HTTP/1.1 Transfer-Encoding: chunked and HTTP/2 requests that omit the content-length pseudo-header, because the...

GO-2026-5944 Skipper: opaAuthorizeRequestWithBody filter bypasses OPA policy on Transfer-Encoding — chunked / HTTP/2 requests in github.com/zalando/skipper

Skipper: opaAuthorizeRequestWithBody filter bypasses OPA policy on Transfer-Encoding — chunked / HTTP/2 requests in github.com/zalando/skipper...

CVE-2026-50197

Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.10, zalando/skipper's OpenPolicyAgent integration silently bypasses request-body inspection on HTTP/1.1 Transfer-Encoding: chunked and HTTP/2 requests that omit the content-length pseudo-header, because the...

CVE-2026-50197 Skipper: opaAuthorizeRequestWithBody filter bypasses OPA policy on Transfer-Encoding: chunked / HTTP/2 requests

Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.10, zalando/skipper's OpenPolicyAgent integration silently bypasses request-body inspection on HTTP/1.1 Transfer-Encoding: chunked and HTTP/2 requests that omit the content-length pseudo-header, because the...

CVE-2026-50197 Skipper: opaAuthorizeRequestWithBody filter bypasses OPA policy on Transfer-Encoding: chunked / HTTP/2 requests

Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.10, zalando/skipper's OpenPolicyAgent integration silently bypasses request-body inspection on HTTP/1.1 Transfer-Encoding: chunked and HTTP/2 requests that omit the content-length pseudo-header, because the...