spiffe

spiffe/spire

The SPIFFE Runtime Environment

2.4K stars 626 forks 2.4K watchers Go Apache License 2.0

View on GitHub Website

80 Open Issues Need Help Last updated: Jul 1, 2026

Open Issues Need Help

View All on GitHub

Integration suites require GNU coreutils and bash 4+ to run on a macOS host about 16 hours ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

FIPS compliant images 1 day ago

help wanted priority/backlog unscoped stale

2.4K

The SPIFFE Runtime Environment

Go

Documentation / deployment walk through for SPIRE on TPM. 1 day ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Optionally verify client certificate IP address 2 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Migrate from HCL1 to HCL2 3 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Allow preconfiguration of a bundle path in SPIRE server federation config 4 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Exercise the `k8s_configmap` BundlePublisher plugin in `k8s` integration tests 8 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Proposed Bundle Publisher destinations and formats 10 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Consider introducing a "bootstrap entries" feature for configuring static entries 10 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

oidc-discovery-provider: allow_insecure_scheme WARN is misleading and unsuppressible behind a TLS-terminating load balancer 12 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Consider using gRPC metrics from go-grpc-middleware 15 days ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Fix the "expiring" and "outdated" metrics emitted during entry sync to be accurate across the whole cache 23 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

IMDSv2 Requirement Breaks aws_mysql and aws_postgres Authentication 23 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

bootstrapping trust bundle from another workload api 23 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Azure IMDS Plugin: Attestation Failures Due to Incomplete CA Pattern Coverage 24 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

AWS IID/IAM plugin documentation 29 days ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Question: Spire's compatibility with Kubernetes 29 days ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Update tpmdevid NodeAttestor plugin to use go-tpm TPM-Direct API about 1 month ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Allow workloads to receive federated bundles without having to specify them on a per-entry basis about 1 month ago

help wanted priority/backlog unscoped

2.4K

The SPIFFE Runtime Environment

Go

spire-{agent,server}: allow more gRPC connection configuration about 2 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

make images fails for rootless docker in docker about 2 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Change example configurations to use a persistent KeyManager about 2 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

CredentialComposer plugin serializes integer claims as float 2 months ago

help wanted priority/backlog unscoped

2.4K

The SPIFFE Runtime Environment

Go

agent: log non-sensitive selectors 3 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Add windows instance flag support 3 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Support Azure Database for PostgreSQL AAD token refresh in SPIRE SQL datastore 3 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Add runtime warnings for allowInsecureScheme in OIDC Discovery Provider 3 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

SPIRE Server should enforce agent IDs reside in the agent namespace 3 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Want to work with CNCF Supply Chain Security WG to make SPIRE an example of best practice? 3 months ago

help wanted priority/backlog unscoped stale

2.4K

The SPIFFE Runtime Environment

Go

Use `SO_PEERPIDFD` and `GetUnitByPIDFD()` instead of `GetUnitByPID` for `systemd` workload attestation for less roundtrips to dbus and no race conditions and more unique identity 3 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Support retuning of log level on spire-agent 3 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

[spire-agent] improve "outdated entries" detection logic in LRU cache 3 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

sigstore: promote out of experimental 4 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

debug API logs metrics misconfiguration errors 4 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

SPIRE server incorrectly rate limits when behind a load balancer that doesn't support client IP preservation 4 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

[spire] prometheus spiffe cert support 4 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Node attestor azure_imds runtime error / plugin panic 4 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

[FEATURE] spire server endpoint listing recommended spire-agent version 4 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Add integration test for external plugins 4 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Feature request: new format metric support. 5 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

support TLS for telemetry (Prometheus) port 5 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

The SPIRE Agent cmd cli handling doesn't use the testing Adaptor used by SPIRE Server 5 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Hardening the Agent - Rate Limiting UDS 5 months ago

help wanted priority/backlog unscoped

2.4K

The SPIFFE Runtime Environment

Go

Feature request: Podman Workload Attester (Rootless, Multi-User Support) 6 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Implement WorkloadAPI WIT-SVID profile 6 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Database primary key reached maximum value of sequence 7 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Making code involving syscalls testable in `peertracker` 7 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

JWT JTI Attribute 7 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

[oidc-discovery-provider] spiffe cert support 8 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

SPIRE agent can exceed the RPC timeout when synchronising bundles with many federations 8 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

JWT signing key validity period not considered in calculation of bundle "spiffe_refresh_hint" 8 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Flaky Windows tests in cmd/spire-server/cli/bundle 8 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Add PostgreSQL Cloud SQL Proxy support 8 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Integration coverage for TPM attestation 8 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Investigate upgrading gorm library 8 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

SPIRE server Microsoft SQL support & forked GORM version 9 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Flaky tests in pkg/common/health 9 months ago

good first issue help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Missing support for KMS key tagging ("aws_kms" plugin) 9 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Spire-Agent is failing to rotate its SVID due to Missing KeyManager directory 9 months ago

good first issue help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Can spire agent send its build version to spire server for telemetry? 10 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Azure NodeAttestor does not work with VM scale sets 10 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Flag for jwt preference entry 10 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Documentation improvement in aws_s3 BundlePublisher plugin 10 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Add unit test to cover key destruction enqueueing case in gcpkms KeyManager plugin 10 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Create migration guide for users impacted by agent ID shape enforcement 10 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

JSON output of CLI commands includes empty fields that should be omitted 10 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Improve agent plugin nodeattestore x509pop's configuration handling 11 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Improve config handling in server notifier "k8sbundle" 11 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

MintX509Svid should support svid_hints 11 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Spire Agent to support wider range of elliptic curves 11 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

The spire-agent k8s workload attestor wont refresh kubelet ca if it changes on disk 11 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Flaky test suite TestListenAndServe 11 months ago

good first issue help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Add integration test for systemd WorkloadAttestor plugin 11 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Just OIDC questions 11 months ago

good first issue help wanted

2.4K

The SPIFFE Runtime Environment

Go

Httpchallenge agent plugin config improvement. 11 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

WorkloadAttestor(k8s): Inconsistent attestation with 1-hash-to-many-tags 12 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

spire-agent health check report spire_agent_rpc_workload_api_fetch_x509_bundles{status="PermissionDenied"} metrics 12 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Spire will create CAs that are longer lived than the upstream CA 12 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

spire-server entry delete: "but failed to delete 0 entries" about 1 year ago

AI Summary: Improve the user experience of the `spire-server entry delete` command by removing the redundant and confusing "but failed to delete 0 entries" message when all entries are successfully deleted. This involves modifying the command's output to only display successful deletion messages when appropriate.

Complexity: 2/5

good first issue help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

GCP CAS upstreamAuthority plugin does not work with "ENTERPRISE" tier CA pools about 1 year ago

AI Summary: The SPIRE GCP CAS upstreamAuthority plugin needs to be updated to support Google Cloud's Certificate Authority Service Enterprise tier CA pools. This requires adding the `certificate_id` field to the certificate request when interacting with Enterprise tier pools, allowing SPIRE to successfully obtain intermediate CA certificates.

Complexity: 4/5

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go