conftest
« Back to VersTracker
Description:
Test your configuration files using Open Policy Agent
Type: Formula  |  Latest Version: 0.66.0@0  |  Tracked Since: Dec 17, 2025
Links: Homepage  |  formulae.brew.sh
Category: Developer tools
Tags: policy opa kubernetes devops ci-cd validation
Install: brew install conftest
About:
Conftest is a command-line tool that leverages the Open Policy Agent (OPA) to validate configuration files against defined policies. It helps developers and operators enforce best practices, security standards, and organizational rules across various file formats like YAML, JSON, and TOML. By integrating Conftest into CI/CD pipelines, teams can prevent misconfigurations before they reach production environments.
Key Features:
  • Supports multiple configuration file formats (YAML, JSON, TOML, etc.)
  • Uses Rego policy language for flexible and powerful rule definitions
  • Integrates seamlessly into CI/CD workflows for automated policy checks
  • Provides clear, actionable output for policy violations
Use Cases:
  • Enforcing security best practices in Kubernetes manifests
  • Validating infrastructure-as-code (IaC) files like Terraform
  • Ensuring compliance with organizational standards in CI pipelines
Alternatives:
  • kubeval – Kubeval focuses only on Kubernetes schema validation, whereas Conftest uses OPA for custom, complex policy logic.
  • checkov – Checkov offers pre-built policies for IaC security, while Conftest provides a more generic framework for any file type with custom policies.
Version History
Detected Version Rev Change Commit
Dec 25, 2025 3:49pm 0.66.0 0 VERSION_BUMP 703abba5
Nov 9, 2025 2:27am 0 VERSION_BUMP 05a9c1bd
Oct 10, 2025 12:02pm 0 VERSION_BUMP 9d4b56fb
Oct 5, 2025 2:26am 0 VERSION_BUMP 2b1d0476
Sep 14, 2025 2:44am 0 VERSION_BUMP fb6f8743