ReqIf OPA SARIF – CI/CD semantically evaluated policy gates
github.com