pkg.soopen package index

brew / 排名 1396

使用 Homebrew, Nix, zypper, scoop 安装 conftest

查看 conftest 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装命令安全说明

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install conftest

local Homebrew formula metadata

Linux

Nix已验证 · 92%
nix profile install nixpkgs#conftest

nixpkgs package indexes · pkgs/by-name/co/conftest/package.nix · 来源: api.github.com

openSUSE zypper已验证 · 92%
sudo zypper install conftest

openSUSE Tumbleweed package metadata · conftest · 来源: download.opensuse.org

Windows

Scoop已验证 · 92%
scoop install main/conftest

Scoop official bucket manifest trees · bucket/conftest.json · 来源: api.github.com

概览

软件包摘要

Test your configuration files using Open Policy Agent

命令和别名

  • conftest

历史

项目历史与用法

Conftest is an Open Policy Agent project for testing structured configuration data with Rego policies. It is commonly used to check Kubernetes manifests, Terraform, Tekton, Serverless configuration, and other machine-readable config before deployment.

项目历史

The README and documentation describe Conftest as a utility for writing tests against structured configuration data and explicitly ground its policy language in Open Policy Agent's Rego. The project lives under the open-policy-agent GitHub organization and documents discussion in the OPA Slack #opa-conftest channel.

The documentation evolved from Kubernetes examples into a broader parser and policy-testing tool. It supports many formats including CUE, Dockerfile, HCL/HCL2, INI, JSON, Jsonnet, nginx, TOML, XML, YAML, CycloneDX, SPDX, and others, making it useful for policy-as-code checks across infrastructure repositories.

采用历史

Conftest's adoption tracks the rise of policy-as-code in infrastructure delivery: it lets teams test configs locally, in CI, and through pre-commit before tools such as Kubernetes, Terraform, or deployment platforms consume them. Package-manager availability in Homebrew, Nix, Scoop, and zypper reflects that it is treated as a portable developer and CI binary.

使用方式

Typical usage is to place Rego files under a policy directory and run conftest test against one or more config files. The tool evaluates deny, violation, and warn rules in the main namespace by default, but supports namespace flags, stdin, metadata, unit tests with conftest verify, and parser builtins for policy tests.

为什么软件包爱好者会关心

For package curators, Conftest is notable because it packages OPA's policy engine into a focused CLI for files rather than services. It turns Rego from a runtime authorization language into a general-purpose config linting and testing binary that can sit cleanly in CI images and developer package sets.

时间线

  • 2025: release notes show ongoing OPA dependency updates and parser maintenance in the v0.62 line.
  • 2026: v0.68.0 added an nginx parser and moved to OPA 1.15.1.
  • 2026: v0.68.1 adjusted push behavior to use Rego v1 by default.
  • 2026: v0.68.2 updated the embedded OPA dependency to 1.15.2.

Related projects

  • Official sources tie Conftest to Open Policy Agent, Rego, Kubernetes, Tekton, Terraform, Serverless, Dockerfile, HCL, Jsonnet, CUE, and pre-commit-style workflows.

安全态势

风险级别：绿色

narrow executable package without higher-risk signals.

风险分类器

绿色 风险 · 低 置信度 · appliance

原因

  • narrow executable package without higher-risk signals

信号

  • metadata:no-higher-risk-signals

安装行为

  • 未记录 Homebrew bottle 元数据。

建议审查

在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
./conftest.toml

可执行文件

已安装的可执行文件

命令类型暴露范围备注
conftest可执行文件已索引可执行文件从本地可执行文件索引发现。

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。

页面生成时间2026-08-03
管理器版本0.69.0
管理器更新时间2026-08-03
本地数据未知
上游不可用
检测到的最新版本未检测到
  • OK没有生成新鲜度警告。

安装元数据

软件包元数据

软件包键brew:conftest
版本0.69.0
软件包管理器Homebrew
主页https://www.conftest.dev/
仓库https://github.com/open-policy-agent/conftest
最后更新2026-08-03T15:16:52Z
Pulseupdated
Bottle未记录
服务未声明

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。

Nix95%

conftest

nix profile install nixpkgs#conftest
  • normalized package name match
  • 匹配方式：Conftest
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/co/conftest/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
zypper95%

conftest 0.68.2-1.4

Tool to write tests against structured configuration data

https://github.com/open-policy-agent/conftest

sudo zypper install conftest
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: conftest
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Conftest
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: conftest from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst
zypper95%

conftest-bash-completion 0.68.2-1.4

Bash Completion for conftest

https://github.com/open-policy-agent/conftest

sudo zypper install conftest-bash-completion
  • License: Apache-2.0
  • Category: System/Shells
  • Architecture: noarch
  • Source Package: conftest
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Conftest
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: conftest-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst
zypper95%

conftest-fish-completion 0.68.2-1.4

Fish Completion for conftest

https://github.com/open-policy-agent/conftest

sudo zypper install conftest-fish-completion
  • License: Apache-2.0
  • Category: System/Shells
  • Architecture: noarch
  • Source Package: conftest
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Conftest
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: conftest-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst
zypper95%

conftest-zsh-completion 0.68.2-1.4

Zsh Completion for conftest

https://github.com/open-policy-agent/conftest

sudo zypper install conftest-zsh-completion
  • License: Apache-2.0
  • Category: System/Shells
  • Architecture: noarch
  • Source Package: conftest
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Conftest
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: conftest-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst
Scoop95%

main/conftest

scoop install main/conftest
  • normalized package name match
  • 匹配方式：Conftest
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/conftest.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

软件包图谱

链接来自本地软件包关系图、补充数据、依赖边、生态匹配和软件包 hub 归属。

来源线索

由仓库数据生成

此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • pkg.so package database
  • pkgdb category and tag curation