# open-policy-agent/conftest

Write tests against structured configuration data using the Open Policy Agent Rego query language

Repository: https://github.com/open-policy-agent/conftest
Canonical: https://ross.abutalabs.com/products/conftest
Homepage: https://conftest.dev
Language: Go
License: NOASSERTION
License Family: other
Topics: kubernetes, testing, rego, openpolicyagent, open-policy-agent
Last push: 2026-08-25T17:43:43+00:00

## Health v2 (maintenance only)
Score: 98/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 99, release rhythm 96, longevity 100
- inputs: {"age_days": 2715, "days_push": 8, "days_rel": 30, "gap_med": 22.0, "n_releases_24m": 19}
- flags: no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3249, forks 357 (observed 2026-08-28T04:07:51.982082+00:00)

## What it is
Conftest is a CLI utility for writing tests against structured configuration data using the Open Policy Agent Rego language. It validates files like Kubernetes manifests, Terraform code, and Tekton pipelines against deny/warn policy rules, commonly in CI pipelines.

## Use cases
- validate kubernetes manifests against policies in ci
- test terraform code for security misconfigurations
- write policy-as-code tests for config files
- enforce that containers don't run as root
- lint structured configuration with rego policies
- generate documentation from policy metadata

## When to choose
- you want policy-as-code validation of Kubernetes, Terraform, or other structured configs
- your team already uses Open Policy Agent and Rego
- you need a lightweight CLI that fits into CI/CD pipelines

## When to avoid
- you need runtime admission enforcement rather than static config testing (use OPA Gatekeeper)
- you prefer writing validation rules in a non-Rego language
- you only need simple YAML/JSON schema validation without policy logic

## Facets
- artifact type: cli-tool
- maturity: active
- function: testing, security, configuration-management, cli, ci-cd
- domain: developer-tools, testing, infrastructure-as-code, security
- platform: windows, cli, go
- tags: rego, open-policy-agent, policy-as-code, kubernetes, terraform, configuration-validation, devops, linux, macos, docker

## Member repositories
- open-policy-agent/conftest (main) score 98

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:51.982082+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:24:26.602768+00:00, confidence not recorded.
  - readme: https://github.com/open-policy-agent/conftest (fetched 2026-08-28T04:07:51.982082+00:00, sha 40a1d1f3c51c)
  - homepage: https://conftest.dev (fetched 2026-08-29T09:37:06.375922+00:00, sha 2d6774eb8afc)
  - site_page: https://www.conftest.dev/install (fetched 2026-08-29T09:37:06.385331+00:00, sha 79a59f203ac5)
  - site_page: https://www.conftest.dev/documentation (fetched 2026-08-29T09:37:06.387179+00:00, sha f1bd135b0b9d)
- Data as of 2026-08-30T08:39:29.467469+00:00.