- name: install Open Policy Agent
  ansible.builtin.get_url:
    url: https://openpolicyagent.org/downloads/v0.61.0/opa_linux_amd64_static
    dest: ~/.local/bin/opa
    mode: '0700'