Conftest is a CLI tool that tests structured configuration data using the Open Policy Agent Rego language. It validates Kubernetes manifests, Terraform configs, Dockerfiles, CI pipelines, and any other structured format against custom policy rules.
Installs into .claude/skills of the current project.
Are you the author of Conftest Opa Config Policy Testing?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/agentskillexchange-conftest-opa-config-policy-testing)
---
name: "Conftest Structured Configuration Policy Testing with OPA Rego"
slug: "conftest-opa-config-policy-testing"
description: "Conftest is a CLI tool that tests structured configuration data using the Open Policy Agent Rego language. It validates Kubernetes manifests, Terraform configs, Dockerfiles, CI pipelines, and any other structured format against custom policy rules."
github_stars: 3151
verification: "security_reviewed"
source: "https://github.com/open-policy-agent/conftest"
category: "Security & Verification"
framework: "Multi-Framework"
tool_ecosystem:
github_repo: "open-policy-agent/conftest"
github_stars: 3151
---
# Conftest Structured Configuration Policy Testing with OPA Rego
Conftest is a CLI tool that tests structured configuration data using the Open Policy Agent Rego language. It validates Kubernetes manifests, Terraform configs, Dockerfiles, CI pipelines, and any other structured format against custom policy rules.
## Installation
Basic usage or getting-started notes:
- Here's a quick example. Save the following as policy/deployment.rego:
- Assuming you have a Kubernetes deployment in deployment.yaml you can run Conftest like so:
- Source: https://github.com/open-policy-agent/conftest
- Extracted from upstream docs: https://raw.githubusercontent.com/open-policy-agent/conftest/HEAD/README.md
## Source
- [Agent Skill Exchange](https://agentskillexchange.com/skills/conftest-opa-config-policy-testing/)
