Hey Karl, I'd recommend to use Checkov instead of OPA. Checkov has inbuilt rules haing basic security checks so we don't have to write rules. I'll be preparing an article shortly.