spiffe

spiffe/spire

The SPIFFE Runtime Environment

2.4K stars 626 forks 2.4K watchers Go Apache License 2.0

View on GitHub Website

85 Open Issues Need Help Last updated: Jul 1, 2026

Open Issues Need Help

View All on GitHub

k8s + gvisor about 15 hours ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

azure_imds: handle Flexible VMSS members as standard Azure VMs about 15 hours ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

JWT signing key validity period not considered in calculation of bundle "spiffe_refresh_hint" 7 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Spire will create CAs that are longer lived than the upstream CA 7 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

aws_iid NodeAttestor: support attesting nodes across multiple AWS partitions from a single server 8 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

IMDSv2 Requirement Breaks aws_mysql and aws_postgres Authentication 8 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

spire-agent: allow configuring jitter and retry backoff seperate to reconcile loop 10 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Allow preconfiguration of a bundle path in SPIRE server federation config 24 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Azure IMDS Plugin: Attestation Failures Due to Incomplete CA Pattern Coverage 30 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Integration coverage for TPM attestation about 1 month ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Documentation / deployment walk through for SPIRE on TPM. about 1 month ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

CVEs in dependencies, support for VEX? about 2 months ago

help wanted priority/backlog unscoped stale

2.4K

The SPIFFE Runtime Environment

Go

Integration suites require GNU coreutils and bash 4+ to run on a macOS host about 2 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

FIPS compliant images about 2 months ago

help wanted priority/backlog unscoped stale

2.4K

The SPIFFE Runtime Environment

Go

Optionally verify client certificate IP address about 2 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Migrate from HCL1 to HCL2 about 2 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Exercise the `k8s_configmap` BundlePublisher plugin in `k8s` integration tests about 2 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Proposed Bundle Publisher destinations and formats about 2 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Consider introducing a "bootstrap entries" feature for configuring static entries about 2 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

oidc-discovery-provider: allow_insecure_scheme WARN is misleading and unsuppressible behind a TLS-terminating load balancer about 2 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Consider using gRPC metrics from go-grpc-middleware 2 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Fix the "expiring" and "outdated" metrics emitted during entry sync to be accurate across the whole cache 2 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

bootstrapping trust bundle from another workload api 2 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

AWS IID/IAM plugin documentation 3 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Question: Spire's compatibility with Kubernetes 3 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Update tpmdevid NodeAttestor plugin to use go-tpm TPM-Direct API 3 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Allow workloads to receive federated bundles without having to specify them on a per-entry basis 3 months ago

help wanted priority/backlog unscoped

2.4K

The SPIFFE Runtime Environment

Go

spire-{agent,server}: allow more gRPC connection configuration 3 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

make images fails for rootless docker in docker 3 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Change example configurations to use a persistent KeyManager 3 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

CredentialComposer plugin serializes integer claims as float 4 months ago

help wanted priority/backlog unscoped

2.4K

The SPIFFE Runtime Environment

Go

agent: log non-sensitive selectors 4 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Add windows instance flag support 4 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Support Azure Database for PostgreSQL AAD token refresh in SPIRE SQL datastore 4 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Add runtime warnings for allowInsecureScheme in OIDC Discovery Provider 4 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

SPIRE Server should enforce agent IDs reside in the agent namespace 5 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Want to work with CNCF Supply Chain Security WG to make SPIRE an example of best practice? 5 months ago

help wanted priority/backlog unscoped stale

2.4K

The SPIFFE Runtime Environment

Go

Use `SO_PEERPIDFD` and `GetUnitByPIDFD()` instead of `GetUnitByPID` for `systemd` workload attestation for less roundtrips to dbus and no race conditions and more unique identity 5 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Support retuning of log level on spire-agent 5 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

[spire-agent] improve "outdated entries" detection logic in LRU cache 5 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

sigstore: promote out of experimental 5 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

debug API logs metrics misconfiguration errors 5 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

SPIRE server incorrectly rate limits when behind a load balancer that doesn't support client IP preservation 6 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

[spire] prometheus spiffe cert support 6 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Node attestor azure_imds runtime error / plugin panic 6 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

[FEATURE] spire server endpoint listing recommended spire-agent version 6 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Add integration test for external plugins 6 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Feature request: new format metric support. 6 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

support TLS for telemetry (Prometheus) port 6 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

The SPIRE Agent cmd cli handling doesn't use the testing Adaptor used by SPIRE Server 7 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Hardening the Agent - Rate Limiting UDS 7 months ago

help wanted priority/backlog unscoped

2.4K

The SPIFFE Runtime Environment

Go

Feature request: Podman Workload Attester (Rootless, Multi-User Support) 7 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Implement WorkloadAPI WIT-SVID profile 8 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Database primary key reached maximum value of sequence 8 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Making code involving syscalls testable in `peertracker` 8 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

JWT JTI Attribute 9 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

[oidc-discovery-provider] spiffe cert support 9 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

SPIRE agent can exceed the RPC timeout when synchronising bundles with many federations 9 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Flaky Windows tests in cmd/spire-server/cli/bundle 10 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Add PostgreSQL Cloud SQL Proxy support 10 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Investigate upgrading gorm library 10 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

SPIRE server Microsoft SQL support & forked GORM version 10 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Flaky tests in pkg/common/health 11 months ago

good first issue help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Missing support for KMS key tagging ("aws_kms" plugin) 11 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Spire-Agent is failing to rotate its SVID due to Missing KeyManager directory 11 months ago

good first issue help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Can spire agent send its build version to spire server for telemetry? 11 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Azure NodeAttestor does not work with VM scale sets 12 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Flag for jwt preference entry 12 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Documentation improvement in aws_s3 BundlePublisher plugin 12 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Add unit test to cover key destruction enqueueing case in gcpkms KeyManager plugin 12 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Create migration guide for users impacted by agent ID shape enforcement 12 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

JSON output of CLI commands includes empty fields that should be omitted 12 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Improve agent plugin nodeattestore x509pop's configuration handling 12 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Improve config handling in server notifier "k8sbundle" 12 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

MintX509Svid should support svid_hints about 1 year ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Spire Agent to support wider range of elliptic curves about 1 year ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

The spire-agent k8s workload attestor wont refresh kubelet ca if it changes on disk about 1 year ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Flaky test suite TestListenAndServe about 1 year ago

good first issue help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Add integration test for systemd WorkloadAttestor plugin about 1 year ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Just OIDC questions about 1 year ago

good first issue help wanted

2.4K

The SPIFFE Runtime Environment

Go

Httpchallenge agent plugin config improvement. about 1 year ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

WorkloadAttestor(k8s): Inconsistent attestation with 1-hash-to-many-tags about 1 year ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

spire-agent health check report spire_agent_rpc_workload_api_fetch_x509_bundles{status="PermissionDenied"} metrics about 1 year ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

spire-server entry delete: "but failed to delete 0 entries" about 1 year ago

AI Summary: Improve the user experience of the `spire-server entry delete` command by removing the redundant and confusing "but failed to delete 0 entries" message when all entries are successfully deleted. This involves modifying the command's output to only display successful deletion messages when appropriate.

Complexity: 2/5

good first issue help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

GCP CAS upstreamAuthority plugin does not work with "ENTERPRISE" tier CA pools about 1 year ago

AI Summary: The SPIRE GCP CAS upstreamAuthority plugin needs to be updated to support Google Cloud's Certificate Authority Service Enterprise tier CA pools. This requires adding the `certificate_id` field to the certificate request when interacting with Enterprise tier pools, allowing SPIRE to successfully obtain intermediate CA certificates.

Complexity: 4/5

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go