* [cnspec v13.37.0](https://github.com/mondoohq/cnspec) – Cloud-native policy-as-code engine that scans infrastructure, containers, Kubernetes, cloud services, and code for vulnerabilities and misconfigurations.

* [Open Policy Agent v1.20.0](https://github.com/open-policy-agent/opa) – General-purpose policy engine for unified, context-aware policy enforcement across various systems.

* [opa-envoy-plugin v1.20.1-envoy](https://github.com/open-policy-agent/opa-envoy-plugin) – Extends OPA to enforce fine-grained, context-aware policies for Envoy via the External Authorization gRPC API.

* [Plumber v0.4.48](https://github.com/getplumber/plumber) – CI/CD compliance scanner for GitLab pipelines