spiffe

spiffe/spire

The SPIFFE Runtime Environment

2.4K stars 626 forks 2.4K watchers Go Apache License 2.0

View on GitHub Website

73 Open Issues Need Help Last updated: Jul 1, 2026

Open Issues Need Help

View All on GitHub

Update tpmdevid NodeAttestor plugin to use go-tpm TPM-Direct API 6 days ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Allow workloads to receive federated bundles without having to specify them on a per-entry basis 15 days ago

help wanted priority/backlog unscoped

2.4K

The SPIFFE Runtime Environment

Go

spire-{agent,server}: allow more gRPC connection configuration 15 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

make images fails for rootless docker in docker 15 days ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Fix the "expiring" and "outdated" metrics emitted during entry sync to be accurate across the whole cache 25 days ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Change example configurations to use a persistent KeyManager 25 days ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Exercise the `k8s_configmap` BundlePublisher plugin in `k8s` integration tests 25 days ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

IMDSv2 Requirement Breaks aws_mysql and aws_postgres Authentication 27 days ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Consider introducing a "bootstrap entries" feature for configuring static entries about 1 month ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

CredentialComposer plugin serializes integer claims as float about 1 month ago

help wanted priority/backlog unscoped

2.4K

The SPIFFE Runtime Environment

Go

agent: log non-sensitive selectors about 2 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Add windows instance flag support about 2 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Azure IMDS Plugin: Attestation Failures Due to Incomplete CA Pattern Coverage about 2 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Support Azure Database for PostgreSQL AAD token refresh in SPIRE SQL datastore about 2 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Add runtime warnings for allowInsecureScheme in OIDC Discovery Provider about 2 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Optionally verify client certificate IP address 2 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

SPIRE Server should enforce agent IDs reside in the agent namespace 2 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Want to work with CNCF Supply Chain Security WG to make SPIRE an example of best practice? 2 months ago

help wanted priority/backlog unscoped stale

2.4K

The SPIFFE Runtime Environment

Go

Use `SO_PEERPIDFD` and `GetUnitByPIDFD()` instead of `GetUnitByPID` for `systemd` workload attestation for less roundtrips to dbus and no race conditions and more unique identity 2 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Support retuning of log level on spire-agent 2 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

[spire-agent] improve "outdated entries" detection logic in LRU cache 2 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

sigstore: promote out of experimental 3 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

debug API logs metrics misconfiguration errors 3 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

SPIRE server incorrectly rate limits when behind a load balancer that doesn't support client IP preservation 3 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

[spire] prometheus spiffe cert support 3 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Node attestor azure_imds runtime error / plugin panic 3 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

[FEATURE] spire server endpoint listing recommended spire-agent version 3 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Add integration test for external plugins 3 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Migrate from HCL1 to HCL2 4 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Feature request: new format metric support. 4 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

support TLS for telemetry (Prometheus) port 4 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

The SPIRE Agent cmd cli handling doesn't use the testing Adaptor used by SPIRE Server 4 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Hardening the Agent - Rate Limiting UDS 4 months ago

help wanted priority/backlog unscoped

2.4K

The SPIFFE Runtime Environment

Go

Feature request: Podman Workload Attester (Rootless, Multi-User Support) 5 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Implement WorkloadAPI WIT-SVID profile 5 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Database primary key reached maximum value of sequence 6 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Making code involving syscalls testable in `peertracker` 6 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

JWT JTI Attribute 6 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

[oidc-discovery-provider] spiffe cert support 7 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

SPIRE agent can exceed the RPC timeout when synchronising bundles with many federations 7 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Allow preconfiguration of a bundle path in SPIRE server federation config 7 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

JWT signing key validity period not considered in calculation of bundle "spiffe_refresh_hint" 7 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Flaky Windows tests in cmd/spire-server/cli/bundle 7 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Add PostgreSQL Cloud SQL Proxy support 7 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Integration coverage for TPM attestation 7 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Investigate upgrading gorm library 7 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

SPIRE server Microsoft SQL support & forked GORM version 8 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Flaky tests in pkg/common/health 8 months ago

good first issue help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Missing support for KMS key tagging ("aws_kms" plugin) 8 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Spire-Agent is failing to rotate its SVID due to Missing KeyManager directory 9 months ago

good first issue help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Can spire agent send its build version to spire server for telemetry? 9 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Azure NodeAttestor does not work with VM scale sets 9 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Flag for jwt preference entry 9 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Documentation improvement in aws_s3 BundlePublisher plugin 9 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Add unit test to cover key destruction enqueueing case in gcpkms KeyManager plugin 9 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Create migration guide for users impacted by agent ID shape enforcement 9 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Proposed Bundle Publisher destinations and formats 9 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

JSON output of CLI commands includes empty fields that should be omitted 9 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Improve agent plugin nodeattestore x509pop's configuration handling 10 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Improve config handling in server notifier "k8sbundle" 10 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

MintX509Svid should support svid_hints 10 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Spire Agent to support wider range of elliptic curves 10 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

The spire-agent k8s workload attestor wont refresh kubelet ca if it changes on disk 10 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Flaky test suite TestListenAndServe 10 months ago

good first issue help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Add integration test for systemd WorkloadAttestor plugin 10 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

Just OIDC questions 10 months ago

good first issue help wanted

2.4K

The SPIFFE Runtime Environment

Go

Httpchallenge agent plugin config improvement. 10 months ago

help wanted priority/backlog stale

2.4K

The SPIFFE Runtime Environment

Go

WorkloadAttestor(k8s): Inconsistent attestation with 1-hash-to-many-tags 11 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

spire-agent health check report spire_agent_rpc_workload_api_fetch_x509_bundles{status="PermissionDenied"} metrics 11 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Spire will create CAs that are longer lived than the upstream CA 11 months ago

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

spire-server entry delete: "but failed to delete 0 entries" 11 months ago

AI Summary: Improve the user experience of the `spire-server entry delete` command by removing the redundant and confusing "but failed to delete 0 entries" message when all entries are successfully deleted. This involves modifying the command's output to only display successful deletion messages when appropriate.

Complexity: 2/5

good first issue help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

GCP CAS upstreamAuthority plugin does not work with "ENTERPRISE" tier CA pools 12 months ago

AI Summary: The SPIRE GCP CAS upstreamAuthority plugin needs to be updated to support Google Cloud's Certificate Authority Service Enterprise tier CA pools. This requires adding the `certificate_id` field to the certificate request when interacting with Enterprise tier pools, allowing SPIRE to successfully obtain intermediate CA certificates.

Complexity: 4/5

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go

Question: Spire's compatibility with Kubernetes 12 months ago

AI Summary: Update SPIRE's documentation to reflect the current compatibility matrix between SPIRE and Kubernetes. This involves identifying the most up-to-date compatibility information, potentially creating a compatibility matrix if one doesn't exist, and updating the Quickstart guide and Supported Integrations document accordingly.

Complexity: 3/5

help wanted priority/backlog

2.4K

The SPIFFE Runtime Environment

Go