Is anyone using Pulumi's Crossguard in anger at their orgs? The issue I found with Crossguard is that if i'm using it with the OPA Policy analyzer, that i'm unable to target the resource type i'm trying to write the policy against which kind of limits it's ability. For example, with REGO, you cannot say, if it's an Azure Service Bus namespace, the Minimum Tls Version should be 1.2

I think this covers this: https://github.com/pulumi/pulumi-policy-opa/issues/10 You can get access to resource types in other policy languages

Is OPA support mature? I remember reading it’s still fairly new