The Rego compiler supports
strict mode, where additional constraints and safety checks are enforced during compilation.
Compiler rules that will be enforced by future versions of OPA, but will be a breaking change once introduced, are incubated in strict mode.
This creates an opportunity for users to verify that their policies are compatible with the next version of OPA before upgrading.
Compiler Strict mode is supported by the
check command, and can be enabled through the
-S, --strict enable compiler strict mode
Strict Mode Constraints and Checks
|Enforced by default in OPA version
|Duplicate imports, where one import shadows another, are prohibited.
|Unused local assignments
|Unused assignments local to a rule, function or comprehension are prohibited
|Unused imports are prohibited.
data reserved keywords
data are reserved keywords, and may not be used as names for rules and variable assignment.
|Use of deprecated built-ins
|Use of deprecated functions is prohibited, and these will be removed in OPA 1.0. Deprecated built-in functions: