I was pleasantly surprised to see that TFLint created an OPA plugin! In the past, I've wanted to create a custom TFLint plugin with my own rulesets, but the overhead of maintaining it over time seemed pretty daunting. I played around with the OPA ruleset and it makes it exponentially easier to write Rego for the things I care about. I wrote a little blog on how I configured and incorporated it into my pipelines and pre-commit hooks! Wire it up to Atmos and you have a little compliance as code framework baked right next to your IaC rosesecurity.dev/2026/08/12/terraform-opa-the-easy-way.html

This is awesome, I've never been great at rego, but I think this is the push I needed to get serious about OPA

I always liked the idea but feared the implementation and Rego. Happy compliancing!

One pro-tip is I think it supports SARIF