Conftest

7.3easy start · #2 of 27
in Infrastructure Testing Tools

Free to practise onyes
Free trialnot on record
Well documentedyes
Runs where you workyes

Runs on Linux, Mac, Windows.

Conftest is ranked #2 of 27 in infrastructure testing tools on The Geeks Club. It runs on Linux, macOS, Windows. There is a free plan.

Conftest plans and pricing

All plans

Open-source Conftest Free Apache License 2.0 github.com · 1 Oct 2026

Compared on infrastructure testing tools

Free plan: Yes
Terraform analysis: Yes
Kubernetes analysis: Yes
Custom policies: Yes
Pull request scanning: Yes

Best Conftest alternatives

See all 12

Chef InSpec 0 of 4 in the starter kit Lesson 17.7 Test Kitchen 0 of 4 in the starter kit Lesson 37.2 kubeconform 0 of 4 in the starter kit Lesson 47.1 Terratest 0 of 4 in the starter kit Lesson 57.1 AWS CloudFormation 0 of 4 in the starter kit Lesson 66.9 cfn-lint 0 of 4 in the starter kit Lesson 76.9

The record

Purpose: Conftest is a utility for writing tests against structured configuration data.
Policy language: Conftest uses the Open Policy Agent Rego language for writing policies.
Target users: Conftest is designed for configuration testing in CI environments.
Supported formats: Supported inputs include Kubernetes-style YAML, JSON, HCL/HCL2, Dockerfiles, Terraform-related data, JSONnet, TOML, XML, and other formats listed in the documentation.
Policy rules: Conftest evaluates deny, violation, and warn rules and supports namespaces.
Input methods: Configuration can be tested from files, directories, multiple files, or standard input.
CI outputs: Output formats include JSON, TAP, table, JUnit, GitHub, Azure DevOps, and SARIF.
GitHub integration: The GitHub outputter can annotate configuration test results for GitHub workflows.
Policy sharing: Policies can be pulled from HTTPS URLs, Git repositories, and OCI registries, and pushed to compatible OCI registries.
Plugin system: Plugins can extend the Conftest CLI and can be downloaded through OCI, local files, Git, HTTP/HTTPS, Mercurial, Amazon S3, or Google Cloud Storage.
Pre-commit: Conftest provides pre-commit hooks for testing, verifying, documenting, pulling, and formatting policies.
Release security: Every release asset, checksums file, and container image is attested with GitHub artifact attestations using SLSA provenance signed through Sigstore.
Deployment options: Conftest can be installed with Homebrew, Scoop, Mise, Docker, or from source.
Deprecated image: The instrumenta/conftest container image is deprecated and the documentation directs users to openpolicyagent/conftest.
Price from: Free

Where it ranks on The Geeks Club

Best Infrastructure Testing Tools in 2026#2 of 27
Best Infrastructure Policy as Code Tools in 2026#4 of 24
Best Infrastructure as Code Security Software in 2026#3 of 22

Is Conftest yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Conftest

Sources

conftest.dev· checked 30 Sept 2026
conftest.dev/output/· checked 30 Sept 2026
conftest.dev/options/· checked 30 Sept 2026
conftest.dev/sharing/· checked 30 Sept 2026
conftest.dev/plugins/· checked 30 Sept 2026
conftest.dev/pre_commit/· checked 30 Sept 2026
conftest.dev/install/· checked 30 Sept 2026
github.com/open-policy-agent/conftest· checked 30 Sept 2026
cncf.io/blog/2020/07/23/conftest-joins-the-open· checked 1 Oct 2026
openpolicyagent.org/ecosystem/entry/conftest· checked 1 Oct 2026
github.com/open-policy-agent/conftest/blob/master/· checked 1 Oct 2026