[{"data":1,"prerenderedAt":192},["ShallowReactive",2],{"project-30273753":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":34,"aspects":35,"strip":41,"post_text":42,"what":43,"said":80,"maker_in_thread":121,"shape":129,"grid":132,"attempts":155,"same_week":156,"maker_shows":122,"maker_hidden":185,"reader_version":186,"card":187},"30273753","Open Policy Registry","a Docker-inspired workflow for OPA policies","title","Show HN: Open Policy Registry: a Docker-inspired workflow for OPA policies","https:\u002F\u002Fwww.openpolicyregistry.io\u002F","openpolicyregistry.io","ogazitt",1644420680,2022,26,12,1333,2570,52,"shown","infrastructure","policy registry","cli",[24,25,26,27],"open policy agent","policy as code","oci registry","rego policies","curious",0.25,{"positive":31,"neutral":32,"mixed":33,"critical":33},3,5,0,8,{"idea":36,"execution":38,"privacy":40},{"positive":37,"critical":33},2,{"positive":39,"critical":33},1,{"positive":33,"critical":33},[32,33,33,31,32,31,31,32,31,33,31,33],null,{"problem":44,"audience":51,"pricing":42,"motivation":55,"time_to_build":42,"stack":59,"openness":78,"stage":79,"team_size":78},{"value":45,"source":46,"evidence":47},"Interacting with OPA policy bundles the way Docker images are handled, with no shared place to store and share them","maker",[48],{"id":49,"by":11,"text":50},"30273771","When we first started using OPA [1], we were impressed with how flexible it is as a general-purpose decision engine. One thing we missed, though, is the ability to interact with…",{"value":52,"source":46,"evidence":53},"OPA (Open Policy Agent) community",[54],{"id":49,"by":11,"text":50},{"value":56,"source":46,"evidence":57},"OPA lacked a way to interact with policy bundles like Docker images",[58],{"id":49,"by":11,"text":50},[60,68,74],{"value":61,"source":62,"evidence":63},"OCI registry format","commenter",[64],{"id":65,"by":66,"text":67},"30274801","gertd","First step was to make the explicit workflow build, tag, push, pull available for OPA while being compatible with the existing formats used by OPA. This enveloping approach,…",{"value":69,"source":46,"evidence":70},"Dex for identity",[71],{"id":72,"by":11,"text":73},"30290260","OPCR uses Dex [1] for its IDP, and federates with github through an OAuth2 flow. We only ask for public github information. [1] https:\u002F\u002Fgithub.com\u002Fdexidp\u002Fdex",{"value":75,"source":46,"evidence":76},"GitHub OAuth",[77],{"id":72,"by":11,"text":73},"unknown","launched",{"praise":81,"objections":93,"requests":94,"questions":112,"alternatives":120},[82],{"value":83,"source":62,"evidence":84},"Good idea for managing the lifecycle of policy artifacts",[85,89],{"id":86,"by":87,"text":88},"30275174","viovanov","Once you start using policies as code, something like this is great because you need something to handle the lifecycle of your policy artifact.",{"id":90,"by":91,"text":92},"30275758","apoland","Excited to see this develop further. It would be amazing to have a searchable destination for extendable policies like we now do with docker images.",[],[95,105],{"value":96,"source":62,"evidence":97},"Push policies to other OCI registries such as Docker Hub and GHCR",[98,102],{"id":99,"by":100,"text":101},"30274507","itsronenh","Can the tool push policies to other OCI registries like docker hub or the GitHub registry? I mean, it's nice to have a dedicated registry for OPA policies but are there…",{"id":103,"by":66,"text":104},"30274636","This will get added! There is currently a lot of special casing required, as the OCI spec laying out the Registry API and interactions are not very rich. This limits usability…",{"value":106,"source":62,"evidence":107},"GitHub Actions support for building and pushing policies",[108],{"id":109,"by":110,"text":111},"30275509","mcmm","Are there any github actions available to build and push policies to openpolicyregistry.io ?",[113],{"value":114,"source":62,"evidence":115},"What information is collected when creating an account?",[116],{"id":117,"by":118,"text":119},"30288886","rschwabco","Looks like I need an account to use the registry. What information do you collect?",[],{"comments":122,"answered":37,"key":123},4,[124,127,128],{"id":125,"text":126},"30282600","Definitely in the backlog :)",{"id":49,"text":50},{"id":72,"text":73},{"commenters":130,"max_depth":31,"maker_replies":122,"first_comment_mins":39,"lifespan_hours":131},7,27,[133,135,137,139,140,142,143,145,146,148,149,152],[90,33,32,134,91,33],"project\u002Fpositive\u002Fidea",[125,33,33,136,11,39],"maker\u002Fneutral\u002Fnone",[49,39,33,138,11,39],"project\u002Fneutral\u002Fidea",[99,37,31,138,100,33],[103,37,32,141,66,33],"project\u002Fpositive\u002Fexecution",[65,37,31,138,66,33],[144,31,31,138,66,33],"30277840",[86,122,32,134,87,33],[117,32,31,147,118,33],"project\u002Fneutral\u002Fprivacy",[72,32,33,147,11,39],[109,150,31,151,110,33],6,"project\u002Fneutral\u002Fnone",[153,150,33,154,11,39],"30275719","project\u002Fneutral\u002Fdocs",[],[157,162,167,171,175,180],{"id":158,"name":159,"points":160,"category":161},"30244534","SHA-256 explained step-by-step visually",1241,"learning_science",{"id":163,"name":164,"points":165,"category":166},"30273940","Jless",344,"dev_tools",{"id":168,"name":169,"points":170,"category":161},"30193997","Reso",259,{"id":172,"name":173,"points":174,"category":20},"30267539","PgCat",233,{"id":176,"name":177,"points":178,"category":179},"30257888","Three Magic Words",204,"games",{"id":181,"name":182,"points":183,"category":184},"30194440","Kapwing Smart Cut",171,"creative",false,"v2",{"id":188,"name":5,"line":6,"ai":185,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":29,"top":18,"kw":189,"maker":11,"domain":10,"tier":19,"attempts":33,"strip":190,"url":9,"mix":191,"praise":83,"objection":-1,"sub":21},30273753,[24,25,26,27],"500353353030",[31,32,33,33],1794036616730]