Owner

spiffe

20 indexed repositories · View on GitHub

spire
The SPIFFE Runtime Environment

Go · 2543 stars
spiffe
The SPIFFE Project

Shell · 1855 stars
go-spiffe
Golang library for SPIFFE support

Go · 211 stars
spike
SPIKE is a lightweight secrets store that uses SPIFFE as its identity control plane. It protects your secrets and helps your ops, SREs, a...

Go · 176 stars
spiffe-helper
The SPIFFE Helper is a tool that can be used to retrieve and manage SVIDs on behalf of a workload

Go · 78 stars
spire-controller-manager
Kubernetes controller manager that reconciles workload registration and federation relationships.

Go · 77 stars
spiffe-csi
Container Storage Interface components for SPIFFE

Go · 68 stars
helm-charts-hardened

Go Template · 50 stars
java-spiffe
Java library for SPIFFE support

Java · 46 stars
spire-examples
Examples and documentation showing SPIRE integration with various projects and platforms

44 stars
spiffe.io
Source for the SPIFFE and SPIRE project websites. Hosted by the Cloud Native Computing Foundation

CSS · 34 stars
spire-plugin-sdk
SPIRE Plugin service definitions and scaffolding

Go · 24 stars
spire-api-sdk
SPIRE API Service Definitions

Makefile · 21 stars
spire-identity-exchange
Development project for a set of SPIRE extensions to support identity exchange

Go · 10 stars
spiffe-step-ssh
Issue SSH host certificates using SPIFFE

Go · 7 stars
spiffefs
SPIFFE FS

Go · 2 stars
bootc

Shell · 1 star
spire-ha-agent
SPIRE HA Agent

Go · 1 star
spire-dev-action

0 stars
slurm-spire-syncer

Go · 0 stars

Beginner friendly Everything

Open All

Proposal to remove commons-validator dependency Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

spiffe/java-spiffe#466 · Opened Sep 18, 2026
docs: fix 'allow to retrieve/configure' grammar in spire_server federation docs Open

priority/backlog

Difficulty 1/5 Under an hour Newbie friendliness 92/100

spiffe/spire#7283 · 1 comment · Opened Sep 13, 2026
Add a binary-compatibility check to catch unintended ABI breaks between releases Open

Difficulty 4/5 3-5 days Newbie friendliness 58/100

spiffe/java-spiffe#463 · 1 comment · 1 reaction · Opened Sep 10, 2026
Feature request: Add optional SPIFFE Broker API client support Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

spiffe/spiffe-helper#436 · Opened Sep 9, 2026
k8s + gvisor Open

triage/in-progress

Difficulty 4/5 3-5 days Newbie friendliness 35/100

spiffe/spire#7272 · 4 comments · Opened Sep 7, 2026
arch and plugin checksums Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

spiffe/helm-charts-hardened#949 · Opened Sep 7, 2026
[TinyProject] psycopg-spiffe-oidc Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

spiffe/spiffe#426 · Opened Sep 3, 2026
broker api ping minimal allowed config Open

priority/backlog

Difficulty 3/5 1-2 days Newbie friendliness 65/100

spiffe/spire#7264 · 3 comments · Opened Sep 1, 2026
Refine TLS-specific client behavior during rotation Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

spiffe/spiffe#424 · 1 comment · Opened Aug 31, 2026
Add spiffefs support Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

spiffe/spire-dev-action#2 · Opened Aug 30, 2026
slinky test Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

spiffe/slurm-spire-syncer#3 · 1 comment · Opened Aug 29, 2026
Setting `nodeAttestor.tpmDirect.cas` results in "could not read cert data" error Open

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

spiffe/helm-charts-hardened#933 · 1 comment · Opened Aug 27, 2026
Resolve "ultimate owner" of pod Open

Difficulty 5/5 Over a week Newbie friendliness 28/100

spiffe/spire-controller-manager#736 · Opened Aug 24, 2026
k8s-image-cred-spire-identity-exchange hint fallback Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

spiffe/spire-identity-exchange#105 · Opened Aug 23, 2026
Health check status is refreshed too infrequently Open

priority/backlog

Difficulty 3/5 1-2 days Newbie friendliness 68/100

spiffe/spire#7236 · 3 comments · Opened Aug 22, 2026
Transaction Token Profile Open

spiffe/spiffe#420 · 1 comment · 1 reaction · 1 assignee · Opened Aug 21, 2026
[Feature] Add native Eviden KMS (KMIP 2.1) KeyManager and UpstreamAuthority Open

priority/backlog

spiffe/spire#7233 · 2 comments · 1 assignee · Opened Aug 20, 2026
feature request: support workload attestor based on windows service Open

priority/backlog

spiffe/spire#7220 · 11 comments · 1 assignee · Opened Aug 17, 2026
aws_iid NodeAttestor: support attesting nodes across multiple AWS partitions from a single server Open

help wanted priority/backlog

Difficulty 5/5 Over a week Newbie friendliness 35/100

spiffe/spire#7217 · 3 comments · Opened Aug 14, 2026
Memory usage Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

spiffe/spiffe-step-ssh#5 · Opened Aug 14, 2026
Remove usage of deprecated fulcioroots package Open

priority/backlog

Difficulty 3/5 1-2 days Newbie friendliness 35/100

spiffe/spire#7214 · 1 comment · Opened Aug 14, 2026
macos binaries Open

priority/backlog

Difficulty 3/5 1-2 days Newbie friendliness 58/100

spiffe/spire#7207 · 2 comments · Opened Aug 12, 2026
Add ML-DSA (FIPS 204) signature support for X.509 and JWT SVIDs Open

priority/backlog

Difficulty 5/5 Over a week Newbie friendliness 35/100

spiffe/spire#7205 · 4 comments · Opened Aug 11, 2026
Nested SPIRE: downstream can activate a nearly-expired X509 CA → `already expired` signing failures Open

priority/backlog

Difficulty 4/5 3-5 days Newbie friendliness 55/100

spiffe/spire#7199 · 4 comments · Opened Aug 7, 2026
Health endpoints report healthy when no JWT-SVIDs are being written Open

Difficulty 3/5 1-2 days Newbie friendliness 58/100

spiffe/spiffe-helper#423 · Opened Aug 5, 2026
JWT-SVID file is written non-atomically, and the configured file mode is only applied on creation Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

spiffe/spiffe-helper#422 · Opened Aug 5, 2026
spire-ha support in spiffe trust bundle fetch Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

spiffe/spire-identity-exchange#100 · Opened Aug 2, 2026
spifffe jwt keys from workload api Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

spiffe/spire-identity-exchange#99 · 1 comment · Opened Aug 1, 2026
restrict stack audiences Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

spiffe/spire-identity-exchange#97 · Opened Aug 1, 2026
bootstrapping trust bundle from configmap Open

priority/backlog

Difficulty 4/5 3-5 days Newbie friendliness 45/100

spiffe/spire#7176 · Opened Jul 30, 2026
Introduce support for non-gRPC implementations Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

spiffe/spiffe#416 · 1 comment · Opened Jul 24, 2026
SPIRE Agent Memory Balloons With ContainerStatusUnknown Pods Open

priority/backlog

Difficulty 3/5 1-2 days Newbie friendliness 58/100

spiffe/spire#7161 · 4 comments · Opened Jul 24, 2026
Spiffe helper for Squid Proxies Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

spiffe/spiffe-helper#414 · Opened Jul 20, 2026
spire broker api identity Open

priority/backlog

spiffe/spire#7151 · 6 comments · 1 assignee · Opened Jul 18, 2026
Standard Request: Broker API reference type for external attestation Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

spiffe/spiffe#413 · Opened Jul 18, 2026
Configurable way to allow entry/federation-relationship creation when a federated bundle is missing (revisiting #1256 / #4445) Open

triage/in-progress

Difficulty 5/5 Over a week Newbie friendliness 42/100

spiffe/spire#7146 · 4 comments · Opened Jul 15, 2026
jwt_key_type is not setable Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

spiffe/helm-charts-hardened#879 · Opened Jul 13, 2026
Create a tutorials section and a kubernetes tutorial Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

spiffe/spiffe.io#395 · Opened Jul 13, 2026
OpenBao Support Open

priority/backlog

spiffe/spire#7135 · 4 comments · 1 assignee · Opened Jul 9, 2026
Feature Request: Support a Kubernetes Deployment for TCP-only Broker API Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

spiffe/spire#7116 · 18 comments · Opened Jul 4, 2026
Switch from Hugo to Astro Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

spiffe/spiffe.io#387 · 2 reactions · Opened Jul 3, 2026
Split up SPIFFE and SPIRE documentation Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

spiffe/spiffe.io#386 · 1 reaction · Opened Jul 3, 2026
Move Linkchecker to GitHub Actions Open

Difficulty 3/5 1-2 days Newbie friendliness 58/100

spiffe/spiffe.io#385 · Opened Jul 3, 2026
spire-agent: allow configuring jitter and retry backoff seperate to reconcile loop Open

help wanted priority/backlog

Difficulty 4/5 3-5 days Newbie friendliness 52/100

spiffe/spire#7111 · 7 comments · Opened Jul 2, 2026
allow deploying trust bundle to multiple namespaces in the same cluster Open

Difficulty 3/5 1-2 days Newbie friendliness 65/100

spiffe/helm-charts-hardened#865 · 1 comment · Opened Jul 1, 2026
`azure_msi` NodeAttestor (server): allow configured `subscription_id` with managed-identity/default credentials (avoid mandatory IMDS) Open

priority/backlog

Difficulty 3/5 1-2 days Newbie friendliness 68/100

spiffe/spire#7104 · 3 comments · Opened Jul 1, 2026
feature request: add in-memory cache for entry list Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

spiffe/spire-controller-manager#705 · Opened Jul 1, 2026
spire-ha-agent mode Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

spiffe/spire-identity-exchange#85 · Opened Jun 30, 2026
parentid / spiffeid simplification Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

spiffe/spire-controller-manager#704 · 1 comment · Opened Jun 30, 2026
Builtin cheap HA with distributed SQLite implementations Open

triage/in-progress

Difficulty 5/5 Over a week Newbie friendliness 15/100

spiffe/spire#7098 · 2 comments · Opened Jun 30, 2026

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

spiffe

Showing the newest 100

Get new issues in your inbox