{"id":"https://openalex.org/W7160397698","doi":"https://doi.org/10.1109/saner-c67878.2026.00038","title":"Policy-as-Code in the Wild: A Taxonomy and Dataset for Open Policy Agent from Github","display_name":"Policy-as-Code in the Wild: A Taxonomy and Dataset for Open Policy Agent from Github","publication_year":2026,"publication_date":"2026-03-17","ids":{"openalex":"https://openalex.org/W7160397698","doi":"https://doi.org/10.1109/saner-c67878.2026.00038"},"language":"en","primary_location":{"id":"doi:10.1109/saner-c67878.2026.00038","doi":"https://doi.org/10.1109/saner-c67878.2026.00038","is_oa":false,"landing_page_url":"https://doi.org/10.1109/saner-c67878.2026.00038","pdf_url":null,"source":{"id":"https://openalex.org/S7407088822","display_name":"IEEE International Conference on Software Analysis, Evolution and Reengineering - Companion (SANER-C)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE International Conference on Software Analysis, Evolution and Reengineering - Companion (SANER-C)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135494532","display_name":"Cal \u00d6nal","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I193700539","display_name":"Tilburg University","ror":"https://ror.org/04b8v1s79","country_code":"NL","type":"education","lineage":["https://openalex.org/I193700539"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Cal \u00d6nal","raw_affiliation_strings":["Jheronimus Academy of Data Science, Tilburg University,'s-Hertogenbosch,Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Jheronimus Academy of Data Science, Tilburg University,'s-Hertogenbosch,Netherlands","institution_ids":["https://openalex.org/I193700539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061039582","display_name":"Indika Kumara","orcid":"https://orcid.org/0000-0003-4355-0494","observed_orcids":["https://orcid.org/0000-0003-4355-0494"]},"institutions":[{"id":"https://openalex.org/I193700539","display_name":"Tilburg University","ror":"https://ror.org/04b8v1s79","country_code":"NL","type":"education","lineage":["https://openalex.org/I193700539"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Indika Kumara","raw_affiliation_strings":["Jheronimus Academy of Data Science, Tilburg University,'s-Hertogenbosch,Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Jheronimus Academy of Data Science, Tilburg University,'s-Hertogenbosch,Netherlands","institution_ids":["https://openalex.org/I193700539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5094321320","display_name":"Filippo Scaramuzza","orcid":"https://orcid.org/0009-0007-9289-3182","observed_orcids":["https://orcid.org/0009-0007-9289-3182"]},"institutions":[{"id":"https://openalex.org/I193700539","display_name":"Tilburg University","ror":"https://ror.org/04b8v1s79","country_code":"NL","type":"education","lineage":["https://openalex.org/I193700539"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Filippo Scaramuzza","raw_affiliation_strings":["Jheronimus Academy of Data Science, Tilburg University,'s-Hertogenbosch,Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Jheronimus Academy of Data Science, Tilburg University,'s-Hertogenbosch,Netherlands","institution_ids":["https://openalex.org/I193700539"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5037190736","display_name":"Marco Tonnarelli","orcid":"https://orcid.org/0009-0004-7329-6663","observed_orcids":["https://orcid.org/0009-0004-7329-6663"]},"institutions":[{"id":"https://openalex.org/I193700539","display_name":"Tilburg University","ror":"https://ror.org/04b8v1s79","country_code":"NL","type":"education","lineage":["https://openalex.org/I193700539"]},{"id":"https://openalex.org/I83019370","display_name":"Eindhoven University of Technology","ror":"https://ror.org/02c2kyt77","country_code":"NL","type":"education","lineage":["https://openalex.org/I83019370"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Marco Tonnarelli","raw_affiliation_strings":["Eindhoven University of Technology, Tilburg University/NXP Semiconductors,'s-Hertogenbosch,Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Eindhoven University of Technology, Tilburg University/NXP Semiconductors,'s-Hertogenbosch,Netherlands","institution_ids":["https://openalex.org/I193700539","https://openalex.org/I83019370"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.8175,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.85199072,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"234","last_page":"241"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.3783999979496002,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.3783999979496002,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.3043999969959259,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.17270000278949738,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/policy-as-code","display_name":"policy-as-code","score":0.9160000085830688},{"id":"https://openalex.org/keywords/open-policy-agent","display_name":"Open Policy Agent","score":0.996999979019165},{"id":"https://openalex.org/keywords/policy-taxonomy","display_name":"policy taxonomy","score":0.8270000219345093},{"id":"https://openalex.org/keywords/policy-management","display_name":"policy management","score":0.628000020980835},{"id":"https://openalex.org/keywords/automated-policy-enforcement","display_name":"automated policy enforcement","score":0.699999988079071},{"id":"https://openalex.org/keywords/github-repositories","display_name":"GitHub repositories","score":0.7319999933242798},{"id":"https://openalex.org/keywords/software-repository-mining","display_name":"software repository mining","score":0.6439999938011169},{"id":"https://openalex.org/keywords/regulatory-compliance","display_name":"regulatory compliance","score":0.39899998903274536}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6535999774932861},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.5167999863624573},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.37229999899864197},{"id":"https://openalex.org/C3018397939","wikidata":"https://www.wikidata.org/wiki/Q3644502","display_name":"Open source","level":3,"score":0.36820000410079956},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.28870001435279846},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.28200000524520874},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.2671000063419342},{"id":"https://openalex.org/C2780535194","wikidata":"https://www.wikidata.org/wiki/Q309901","display_name":"Open data","level":2,"score":0.2508000135421753},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.24879999458789825},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.23029999434947968}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/saner-c67878.2026.00038","doi":"https://doi.org/10.1109/saner-c67878.2026.00038","is_oa":false,"landing_page_url":"https://doi.org/10.1109/saner-c67878.2026.00038","pdf_url":null,"source":{"id":"https://openalex.org/S7407088822","display_name":"IEEE International Conference on Software Analysis, Evolution and Reengineering - Companion (SANER-C)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE International Conference on Software Analysis, Evolution and Reengineering - Companion (SANER-C)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W2955656327","https://openalex.org/W2969940496","https://openalex.org/W3157440142","https://openalex.org/W4200065965","https://openalex.org/W4285728233","https://openalex.org/W4291213652","https://openalex.org/W4315480688","https://openalex.org/W4389279107","https://openalex.org/W4393928157","https://openalex.org/W4399668113","https://openalex.org/W4401878776","https://openalex.org/W4402077959","https://openalex.org/W4411272026","https://openalex.org/W4414648726","https://openalex.org/W4414942735"],"related_works":["https://openalex.org/W7169774833","https://openalex.org/W7171986568","https://openalex.org/W7139143859","https://openalex.org/W7117969344","https://openalex.org/W7169565521","https://openalex.org/W4407783859","https://openalex.org/W7137342322","https://openalex.org/W7053565467","https://openalex.org/W2899052506","https://openalex.org/W6995782780"],"abstract_inverted_index":{"Policy-as-Code":[0],"(PaC)":[1],"enables":[2],"the":[3,17,29,48,81,126,142],"definition,":[4],"management,":[5],"and":[6,10,23,32,59,91,93,120,144,150,156,159],"enforcement":[7],"of":[8,19,65,135],"policies":[9],"regulations":[11],"using":[12,108],"source":[13],"code,":[14],"thereby":[15],"supporting":[16],"application":[18],"software":[20],"engineering":[21],"practices":[22],"tools":[24,34,160],"to":[25,51,60,161],"policy":[26,114,138,164],"management.":[27],"While":[28],"gray":[30],"literature":[31,46],"industrial":[33],"indicate":[35],"PaC":[36,54,66,82],"is":[37,43,55,86],"increasingly":[38],"used":[39,56,88],"in":[40,57,89],"organizations,":[41],"there":[42],"little":[44],"academic":[45],"on":[47],"topic.":[49],"Hence,":[50],"understand":[52,152],"how":[53],"practice":[58],"create":[61],"a":[62,70,96,112,132],"representative":[63],"dataset":[64,134,145],"scripts,":[67],"we":[68,110],"conducted":[69],"repository":[71],"mining":[72,103],"study.":[73],"We":[74,129,140],"selected":[75],"Open":[76],"Policy":[77],"Agent":[78],"(OPA)":[79],"as":[80,95],"framework":[83],"because":[84],"it":[85],"widely":[87],"academia":[90],"industry":[92],"serves":[94],"de":[97],"facto":[98],"standard":[99],"for":[100],"PaC.":[101,167],"By":[102],"73":[104],"public":[105],"GitHub":[106],"repositories":[107],"OPA,":[109],"created":[111,131],"multi-level":[113],"taxonomy":[115,143],"comprising":[116],"5":[117],"top-level":[118],"categories":[119,124],"28":[121],"unique":[122],"subtype":[123],"at":[125],"lowest":[127],"level.":[128],"also":[130],"curated":[133],"101":[136],"OPA":[137],"files.":[139],"believe":[141],"can":[146],"help":[147],"both":[148],"researchers":[149],"practitioners":[151],"PaC's":[153],"use":[154],"cases":[155],"develop":[157],"methods":[158],"support":[162],"automated":[163],"management":[165],"with":[166]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2026-05-07T00:00:00"}