Browse 601+ production-ready OPA Rego policies by standard — load one framework or the whole library. Rego v1, vendor-neutral, fail-closed, Apache 2.0.
oras pull ghcr.io/ynotbhatc/rego_policy_libraries:latest # OCI bundle, no clone # every framework: data.<package>.main.compliance_report
No standard matches that filter.
OS, cloud, container, database & network hardening
DoD Security Technical Implementation Guides
NIST, FISMA, FedRAMP, CMMC, CISA CPG
NERC-CIP, IEC 62443, AMI, TSA Pipeline, NIST 800-82
ISO 27001, SOC 2, CSA CCM, COBIT
PCI-DSS, SOX, GLBA
GDPR, HIPAA, CCPA/CPRA, ISO 27701
DORA, NIS2, NCSC CAF, NY DFS, SEC, SWIFT
ITAR and other regulatory regimes
Data residency and sovereignty domains
EU AI Act, ISO 42001, agent authorization, MCP tool-call gating
Ansible, Terraform, Dockerfile, Kubernetes, CI/CD, SLSA
Behavioral detection policies