Skip to content

Releases: idunn-cloud/norn

Release list

First public alpha

First public alpha Pre-release
Pre-release

Choose a tag to compare

View all tags
@adrianfuro adrianfuro released this 20 Sep 11:41
v0.1.0-alpha.1
200bb06
This commit was signed with the committer’s verified signature.
adrianfuro Adrian Furo
GPG key ID: 1DFB96764D52F1C5
Verified
Learn about vigilant mode.

First public alpha release of Norn.

Norn is an open-source CEL-based policy engine for Terraform and OpenTofu plans. It evaluates policies locally against terraform show -json / tofu show -json, with support for advisory, overridable, and mandatory enforcement.

Highlights

  • CEL-based policy evaluation for Terraform/OpenTofu plan JSON
  • Unknown-after-apply handling using CEL partial evaluation
  • Output formats:
    • text
    • json
    • sarif
  • Fixture-based policy testing via norn test
  • Starter Azure policy pack

Status

This is an early alpha release.

The core evaluator works, but the project is still evolving. Policy format, helper functions, outputs, and packaging may change before v1.0.0.

Current limitations

Not implemented yet:

  • exception files with owner and expiry
  • richer Terraform-specific helper functions such as changed("field")
  • relationship helpers for cross-resource rules
  • GitHub Action and packaged releases
  • OCI policy bundles
  • broader AWS/GCP rule packs

Getting started

go install github.com/idunn-cloud/norn/cmd/norn@latest

terraform plan -out tfplan
terraform show -json tfplan > plan.json
norn check --plan plan.json --policies ./policies
Loading