spiffe/spire

View on GitHub

The SPIFFE Runtime Environment

Stars: 2.5k
Forks: 662
Open beginner issues: 0
Indexed issues: 94
Avg merge: 3d 23h
Merged PRs (30d): 38

Dominant language: Go
License: Apache-2.0
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted

Beginner friendly Everything

Open All

94 open issues indexed

docs: fix 'allow to retrieve/configure' grammar in spire_server federation docs Open

priority/backlog

Difficulty 1/5 Under an hour Newbie friendliness 92/100

spiffe/spire#7283 · 1 comment · Opened Sep 13, 2026
k8s + gvisor Open

triage/in-progress

Difficulty 4/5 3-5 days Newbie friendliness 35/100

spiffe/spire#7272 · 4 comments · Opened Sep 7, 2026
broker api ping minimal allowed config Open

priority/backlog

Difficulty 3/5 1-2 days Newbie friendliness 65/100

spiffe/spire#7264 · 3 comments · Opened Sep 1, 2026
Health check status is refreshed too infrequently Open

priority/backlog

Difficulty 3/5 1-2 days Newbie friendliness 68/100

spiffe/spire#7236 · 3 comments · Opened Aug 22, 2026
[Feature] Add native Eviden KMS (KMIP 2.1) KeyManager and UpstreamAuthority Open

priority/backlog

spiffe/spire#7233 · 2 comments · 1 assignee · Opened Aug 20, 2026
feature request: support workload attestor based on windows service Open

priority/backlog

spiffe/spire#7220 · 11 comments · 1 assignee · Opened Aug 17, 2026
aws_iid NodeAttestor: support attesting nodes across multiple AWS partitions from a single server Open

help wanted priority/backlog

Difficulty 5/5 Over a week Newbie friendliness 35/100

spiffe/spire#7217 · 3 comments · Opened Aug 14, 2026
Remove usage of deprecated fulcioroots package Open

priority/backlog

Difficulty 3/5 1-2 days Newbie friendliness 35/100

spiffe/spire#7214 · 1 comment · Opened Aug 14, 2026
macos binaries Open

priority/backlog

Difficulty 3/5 1-2 days Newbie friendliness 58/100

spiffe/spire#7207 · 2 comments · Opened Aug 12, 2026
Add ML-DSA (FIPS 204) signature support for X.509 and JWT SVIDs Open

priority/backlog

Difficulty 5/5 Over a week Newbie friendliness 35/100

spiffe/spire#7205 · 4 comments · Opened Aug 11, 2026
Nested SPIRE: downstream can activate a nearly-expired X509 CA → `already expired` signing failures Open

priority/backlog

Difficulty 4/5 3-5 days Newbie friendliness 55/100

spiffe/spire#7199 · 4 comments · Opened Aug 7, 2026
bootstrapping trust bundle from configmap Open

priority/backlog

Difficulty 4/5 3-5 days Newbie friendliness 45/100

spiffe/spire#7176 · Opened Jul 30, 2026
SPIRE Agent Memory Balloons With ContainerStatusUnknown Pods Open

priority/backlog

Difficulty 3/5 1-2 days Newbie friendliness 58/100

spiffe/spire#7161 · 4 comments · Opened Jul 24, 2026
spire broker api identity Open

priority/backlog

spiffe/spire#7151 · 6 comments · 1 assignee · Opened Jul 18, 2026
Configurable way to allow entry/federation-relationship creation when a federated bundle is missing (revisiting #1256 / #4445) Open

triage/in-progress

Difficulty 5/5 Over a week Newbie friendliness 42/100

spiffe/spire#7146 · 4 comments · Opened Jul 15, 2026
OpenBao Support Open

priority/backlog

spiffe/spire#7135 · 4 comments · 1 assignee · Opened Jul 9, 2026
Feature Request: Support a Kubernetes Deployment for TCP-only Broker API Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

spiffe/spire#7116 · 18 comments · Opened Jul 4, 2026
spire-agent: allow configuring jitter and retry backoff seperate to reconcile loop Open

help wanted priority/backlog

Difficulty 4/5 3-5 days Newbie friendliness 52/100

spiffe/spire#7111 · 7 comments · Opened Jul 2, 2026
`azure_msi` NodeAttestor (server): allow configured `subscription_id` with managed-identity/default credentials (avoid mandatory IMDS) Open

priority/backlog

Difficulty 3/5 1-2 days Newbie friendliness 68/100

spiffe/spire#7104 · 3 comments · Opened Jul 1, 2026
Builtin cheap HA with distributed SQLite implementations Open

triage/in-progress

Difficulty 5/5 Over a week Newbie friendliness 15/100

spiffe/spire#7098 · 2 comments · Opened Jun 30, 2026
Support RFC 8693 act claims in jwt-svid Open

blocked stale

Difficulty 5/5 Over a week Newbie friendliness 45/100

spiffe/spire#7077 · 3 comments · Opened Jun 16, 2026
Support SPIFFE IDs derived from Kubernetes object properties Open

triage/in-progress

Difficulty 5/5 Over a week Newbie friendliness 35/100

spiffe/spire#7075 · 20 comments · Opened Jun 15, 2026
Support configuring OIDC issuer independently from serving domains Open

triage/in-progress

Difficulty 4/5 3-5 days Newbie friendliness 52/100

spiffe/spire#7038 · 4 comments · Opened Jun 5, 2026
FR: Sign X.509-SVIDs with a static, externally-anchored CA (no SPIRE-minted downstream intermediate) Open

triage/in-progress

Difficulty 5/5 Over a week Newbie friendliness 25/100

spiffe/spire#7018 · 4 comments · Opened Jun 3, 2026
Selector based version of the spiffe broker api Open

priority/backlog

Difficulty 4/5 3-5 days Newbie friendliness 45/100

spiffe/spire#7007 · 4 comments · Opened May 31, 2026
SPIRE support for Post-Quantum Cryptography (PQC) Open

priority/backlog

spiffe/spire#6975 · 2 comments · 1 assignee · Opened May 20, 2026
SPIFFE Broker API: better support for resources that are not node bound Open

priority/backlog unscoped

Difficulty 5/5 Over a week Newbie friendliness 25/100

spiffe/spire#6973 · Opened May 20, 2026
Azure IMDS Plugin: Attestation Failures Due to Incomplete CA Pattern Coverage Open

help wanted priority/backlog

Difficulty 4/5 3-5 days Newbie friendliness 55/100

spiffe/spire#6952 · 2 comments · Opened May 12, 2026
Add windows instance flag support Open

help wanted priority/backlog

spiffe/spire#6937 · 2 comments · 1 assignee · Opened May 6, 2026
Implement SPIFFE FS delivery API Open

priority/backlog

Difficulty 5/5 Over a week Newbie friendliness 35/100

spiffe/spire#6909 · 1 comment · 2 reactions · Opened Apr 27, 2026
Dynamic remote K8s PSAT configuration Open

triage/in-progress

Difficulty 5/5 Over a week Newbie friendliness 25/100

spiffe/spire#6883 · 4 comments · Opened Apr 17, 2026
short vs long args Open

next-gen

Difficulty 4/5 3-5 days Newbie friendliness 48/100

spiffe/spire#6790 · 1 comment · Opened Mar 25, 2026
Package Code Review Report (some issues to fix) Open

triage/in-progress

spiffe/spire#6770 · 1 assignee · Opened Mar 20, 2026
Optionally verify client certificate IP address Open

help wanted priority/backlog

Difficulty 4/5 3-5 days Newbie friendliness 48/100

spiffe/spire#6769 · 7 comments · 1 reaction · Opened Mar 20, 2026
Azure Managed HSM keys fail to parse in azurekeyvault key manager plugin Open

priority/backlog

Difficulty 3/5 1-2 days Newbie friendliness 45/100

spiffe/spire#6750 · Opened Mar 16, 2026
Pluggable ServerCA / RA mode for external per-SVID signing Open

triage/in-progress

Difficulty 5/5 Over a week Newbie friendliness 35/100

spiffe/spire#6711 · 14 comments · 5 reactions · Opened Mar 5, 2026
Feature Request: Stacking Multiple Workload Attestors for Composite Identity Verification Open

triage/in-progress

Difficulty 5/5 Over a week Newbie friendliness 30/100

spiffe/spire#6640 · 25 comments · Opened Feb 9, 2026
Implement WorkloadAPI WIT-SVID profile Open

help wanted priority/backlog

Difficulty 5/5 Over a week Newbie friendliness 20/100

spiffe/spire#6634 · 1 comment · 1 reaction · Opened Feb 7, 2026
Feature request: new format metric support. Open

help wanted priority/backlog

Difficulty 4/5 3-5 days Newbie friendliness 35/100

spiffe/spire#6544 · 6 comments · 1 reaction · Opened Jan 12, 2026
Ensure entry on agent and server side is the same Open

priority/backlog

Difficulty 5/5 Over a week Newbie friendliness 25/100

spiffe/spire#6536 · 1 comment · Opened Jan 6, 2026
Add WIT-SVID TTL configuration and entry field Open

priority/backlog

Difficulty 4/5 3-5 days Newbie friendliness 35/100

spiffe/spire#6535 · 1 comment · Opened Dec 29, 2025
Agents need a way to store keys externally in AWS KMS Open

priority/backlog

Difficulty 5/5 Over a week Newbie friendliness 35/100

spiffe/spire#6508 · Opened Dec 19, 2025
Agents need a way to store keys externally in Azure Key vault Open

priority/backlog

Difficulty 5/5 Over a week Newbie friendliness 35/100

spiffe/spire#6482 · 5 comments · Opened Dec 8, 2025
SPIRE server Microsoft SQL support & forked GORM version Open

help wanted priority/backlog

Difficulty 5/5 Over a week Newbie friendliness 25/100

spiffe/spire#6447 · 1 comment · Opened Nov 19, 2025
[ bug ] Fails to build on FreeBSD: undefined: OpenDevice Open

priority/backlog

spiffe/spire#6435 · 6 comments · 1 assignee · Opened Nov 12, 2025
[FEATURE] spire server endpoint listing recommended spire-agent version Open

help wanted priority/backlog

Difficulty 4/5 3-5 days Newbie friendliness 48/100

spiffe/spire#6352 · 9 comments · Opened Oct 2, 2025
WIT-SVID support in SPIRE Open

priority/backlog

Difficulty 5/5 Over a week Newbie friendliness 20/100

spiffe/spire#6326 · 4 comments · 3 reactions · Opened Sep 18, 2025
sqlite3: Consider setting `busy_timeout` pragma Open

priority/backlog

Difficulty 4/5 3-5 days Newbie friendliness 45/100

spiffe/spire#6235 · 2 comments · Opened Aug 7, 2025
Not able to prune the old upstream CA cert from the trust bundle. Open

priority/backlog unscoped

spiffe/spire#6198 · 2 comments · 1 assignee · Opened Jul 17, 2025
UpstreamAuthority "cert-manager": ACME requires that the value is also present in the list of dnsNames or ipAddresses: \"cluster-b\" does not exist in [] or []" Open

blocked stale

Difficulty 4/5 3-5 days Newbie friendliness 35/100

spiffe/spire#6142 · 12 comments · Opened Jun 18, 2025

spiffe/spire

Get new issues in your inbox