https://blog.shiftleft.io/decouple-your-shiftleft-appsec-policies-with-open-policy-agent-a2b0ac07cf47