open-policy-agent / open-policy-agent/setup-opa

Can this be used to install conftest ? If not, is there a plan for an official action

Open
#32 6 comments 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
TypeScript
Stars
55
Forks
16
PR merge metrics
No merged PRs in 30d

Description

Hi all,

I noticed that there are a number of conftest actions out there

https://github.com/marketplace/actions/conftest - instrumenta/conftest-action
https://github.com/marketplace/actions/conftest-action - YubicoLabs/action-conftest
https://github.com/marketplace/actions/setup-opa-conftest - princespaghetti/setup-conftest
https://github.com/marketplace/actions/conftest-opa-test-runner - ibiqlik/conftest-action-docker

In light of the recent tj-actions incident, it would be good to have an official conftest action, if this action cannot be used to install conftest since so many unofficial actions seem to be published.

Workaround

      - name: Install Conftest
        run: |
          curl -sSL https://github.com/open-policy-agent/conftest/releases/download/v0.55.0/conftest_0.55.0_Linux_x86_64.tar.gz -o conftest.tar.gz
          tar -xzvf conftest.tar.gz -C /usr/local/bin/
          chmod +x /usr/local/bin/conftest
          rm conftest.tar.gz

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The issue does not name a file, test, or entry point. Start by reviewing the setup-opa action's TypeScript entry point and existing workflow behavior, then establish whether it can install conftest and define what an official conftest action would need to provide.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions, typescript
Domain
ci-cd, devops
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.