Skip to content
Choose a tag to compare
Choose a tag to compare

This is a maintenance release only and does not include any bug fixes or new features.


  • Bump OPA to v0.33.1
  • Bump Go to v1.17.2


6b6595d (chore) Bump Go to 1.17.2 (#625)
b721065 Bump from 0.32.1 to 0.33.0 (#615)
3f24df0 Bump from 0.33.0 to 0.33.1 (#616)
445878f Bump golang from 1.17.1-alpine to 1.17.2-alpine (#618)
186ae1b Bump mkdocs from 1.1 to 1.2.3 (#624)
19e754e Bump nltk from 3.5 to 3.6.5 (#619)
02462d5 Remove old examples (#620)
4ecfbdf upgrade Oras to oras-go v0.4.0 (#617)

Choose a tag to compare
Choose a tag to compare

New Features

  • Add default data.conftest.file document with the name and dir of the configuration being tested

Bug Fixes

  • Fixed incorrect handling of flags containing a hyphen when they are configured using environment variables

Other Improvements

  • Bump Go to 1.17
  • Bump OPA to 0.32.0


662a1e1 Bump alpine from 3.14.1 to 3.14.2 (#605)
8a463d7 Bump from 0.31.0 to 0.32.0 (#607)
842ecc5 Bump golang from 1.16.7-alpine to 1.17.0-alpine (#603)
52669c0 build: Specify Go 1.17 in the release workflow (#608)
cb8274c build: bump to use go1.17 (#606)
ad06e3d ci: Limit the permissions of the GITHUB_TOKEN in the PR workflow (#609)
8ae303b engine: Add default conftest document during evaluation (#610)
7b733da fix: Flags with hyphens were skipped with config from ENV (#612)
fb7a9fc fix: Incorrect hash in go.sum (#613)

Choose a tag to compare

⚠️ Potentially Breaking Updates ⚠️

  • Bump OPA to v0.31.0, which now catches undefined variables at compile time rather than when they're referenced. For more information, see the OPA change log.

New Features

  • GitHub output format (🎉 thanks @koozz!)

Other Improvements

  • Bump Go and Alpine versions to address potential security issues
  • Bump OPA, improving partial evaluation performance


cea3d72 Add GitHub workflow commands output. (#586)
f68c925 Bump alpine from 3.14.0 to 3.14.1 (#601)
51320a0 Bump from 0.30.2 to 0.31.0 (#599)
be0ec55 Bump golang from 1.16.6-alpine to 1.16.7-alpine (#600)

Choose a tag to compare


a242a61 Add Dependabot monitoring for Dockerfile
4340b53 Add conftest test flag to suppress exceptions
babc73d Add newline to TAP output (#573)
774c275 Add support for properties files.
0ae5f14 Bump Go version to 1.16 (#557)
ce5016d Bump from 0.28.0 to 0.29.1 (#569)
bf13740 Bump from 0.29.1 to 0.29.4 (#574)
ee9e96f Bump from 0.29.4 to 0.30.0
120d034 Bump from 0.30.0 to 0.30.1
f3bf4fc Bump from 0.30.1 to 0.30.2
8787be2 Bump golang from 1.16.5-alpine to 1.16.6-alpine
c55d00e Change to using LoadString & handling the error.
0f795bf Organize golangci-lint linters (#564)
1bcf5ac Show usage when required parameters are not supplied
5935455 Specify versions of base images in Dockerfile
274ab0c Update docs/ (to 0.25.0)
a901976 Update documentation for file extensions (#563)
a3ab727 Update parser documentation for parser flag (#562)
9d56c39 Upgrade cuelang parser to 0.4.0 (#572)
cb7f07f added report flag to conftest verify with fails,notes and full options to output a clear report and traces similar to opa

Choose a tag to compare


  • Add the --no-fail flag to the test command that will always return an exit code of zero (#547)


  • Only calculate traces if the --trace flag is provided (#556) [thanks @msarvar 🎉]


  • Improve the documentation when using the --combine flag (#542) [thanks @shteou 🎉]


16cbb1b Add no-fail flag (#547)
ee86fa8 Adding brief documentation on verify in the usage docs (#543)
8b09609 Bump from 0.27.1 to 0.28.0 (#554)
a7464de Do not make rego trace unless --trace flag is passed in (#556)
fdf26e4 Fix example in documentation (#552)
5389a37 Merge pull request #542 from shteou/improve-combined-input-examples
1c476fe Update data loading test case (#536)
3c4554d Update error message for invalid parse (#546)
0f47a0c Update sharing example when using a PAT (#553)

Choose a tag to compare

NOTE: Starting from v0.24.0, Conftest will be available from the core repositories for both brew and Scoop. The instrumenta repositories are no longer needed when fetching the newest version.


1a4a433 Add .tfvars as an HCL2 parseable file type
cf6b7cf Add additional files to dockerignore
eebd8b2 Add fmt command
01f6e9e Automatically parse dockerfiles with extensions (#492)
03e6b2e Bump from 0.9.0 to 0.10.0 (#487)
8bbbb74 Bump from 1.5.2 to 1.5.3
665a354 Bump from 0.8.1 to 0.8.2 (#494)
31e8f9e Bump from 0.0.4 to 0.0.5 (#483)
af2defb Bump from 1.0.0 to 1.1.3 (#482)
5d2677d Bump jinja2 from 2.11.1 to 2.11.3 (#509)
e677e2c Enable Buildkit in Docker builds to speed things up (#469)
4965867 Fix formatting error in options documentation (#495)
9de0ec2 Fix ignore policy and format
7a18ff5 Fix issue where test count could be negative
8c1b2f7 Fix: Version command does not print the version. (#488)
bbb1309 Format junit output
14f596d Ignore .git for docker
8202f7f Migrate to GitHub Actions
c577d67 Minor documentation update to latest Conftest version (#506)
552cd0b Move plugin tests to test folder
6e53dc5 Move tests to tests directory
ff17bca Remove oci prefix on push if it exists
a82d4f3 Rename contrib directory for plugins
091d6d5 Support a build stage indicator in the Docker parser. (#499)
2831d8c Support for comments in Dockerfile
efe11de Suppress warnings from push and pull
644b8c6 Update documentation for installing plugins (#493)
891de8e Update gogoproto to v1.3.2
93ab7a5 Update (#489)
d61a1ad Update supported extensions
5ca953b Update the source docker image (#502)
e391b11 Upgrade OPA to 0.27.1
aeeacb0 Upgrade ORAS to 0.11.0
1344695 Upgrade to oras version 0.9.0 (#472)
002e012 Use bulk append for building tabular data
66664ce Use dependabot for OPA updates
16f63b1 Verify: count and report skipped tests

Choose a tag to compare


2615e53 Bump from 0.16.0 to 0.17.0 (#450)
fc529cb Bump from 1.5.0 to 1.5.2
288feb3 Bump from 0.3.3 to 0.8.1
5078434 Bump from 0.24.0 to 0.25.2 (#460)
9366d99 Fix case sensitivity in Dockerfile parser detection (#452)
3644df2 Fix for incorrect docker command in Makefile (#444)
e2d34d5 Fixed an issue where the parse command returns a different result from what is passed internally to the policy engine with the --combine flag.
6190ded Merge pull request #448 from Blokje5/fix/bug-in-parse-command-with-combine-flag
6f4549c Merge pull request #463 from open-policy-agent/dependabot/go_modules/
430ce65 Merge pull request #467 from shteou/chore-remove-unit-test-printlns
9344fa2 Merge pull request #468 from open-policy-agent/dependabot/go_modules/
f666df5 chore: remove unneeded Printlns from unit tests
26f2970 fix: tracing output with array inputs (#465)

Choose a tag to compare

NOTE: For conftest versions 0.22.0 and later, please use the Docker image located at


819d3c3 Add development document (#417)
336af58 Add git to Dockerfile (#404)
b34aa10 Add linting to CircleCI & to the Makefile. (#418)
67f5f4e Add maintainers field (#408)
14d1378 Add namespace to output (#434)
cdc8387 Add support for parsing ignore files (#435)
64ddfd5 Assume yaml file extension for empty extensions. Add tests
9ede5bf Bind pull flag (#395)
6c42672 Bump from 1.61.0 to 1.62.0 (#425)
1fdc9d0 Bump from 1.4.1 to 1.4.2 (#398)
0fd7e41 Bump from 1.4.2 to 1.5.0 (#420)
86dbcf4 Bump from 0.23.2 to 0.24.0 (#430)
c3d0ac2 Bump junit from 4.12 to 4.13.1 in /examples/xml (#429)
1bf3744 Bump version in docs (#392)
b5bad18 Change input flag to parser (#410)
4845175 Check for file extension before trying to read it
cc794a6 Combine configurations into struct when using combine (#388)
66636b2 Consolidate evaluation logic into a public package (#381)
01ab5c8 Fix plugins on Windows (#400)
b6c2129 Fix push command on Windows (#415)
353086b Fix typo in JUnit output command in documentation (#431)
0bfe31c Improve violations documentation (#437)
9a80b55 Include warnings when subconfigs are present (#384)
d31f0c8 Initial commit (#402)
019a093 Load policies and data individually (#394)
f74e0ea Merge pull request #382 from HaveFun83/gitlab-ci-fix
07a60e7 Merge pull request #436 from Blokje5/feat/adhere-to-xdg-spec
d2c303a Merge pull request #440 from FairwindsOps/sudermanjr/fix-panic-on-file-extension
41c0f5e Push image on release (#411)
3e5e03c Remove custom HCL2 conversion (#403)
9711356 Remove input-file from verify docs (#396)
cf13dff Remove runtime check on YAML parser (#406)
08e48bf Remove warn prefix when evaluating exceptions (#416)
73cfc1c Render trace results once (#393)
e273d73 Simplify testing list of kubernetes resources (#385)
1d94894 Sort combined results by file path (#405)
d27a05a Support XDG specification
3a772ae Update docs to reflect newest releases (#407)
853e778 Update documentation to reflect the deprecation of the instrumenta/conftest docker image. (#423)
46ec246 fixed gitlab-ci example