Skip OPA's overhead: write Rego policies straight into TFLint for Terraform
The tflint-ruleset-opa plugin lets Terraform teams enforce Rego policies through TFLint with no policy bundles or opa exec wiring. This walkthrough covers setup, a sample policy denying local-exec provisioners, and dropping it into existing pre-commit workflows.