{"id":13658437,"url":"https://github.com/spiffe/spiffe","last_synced_at":"2025-05-14T09:09:11.392Z","repository":{"id":37667504,"uuid":"99618772","full_name":"spiffe/spiffe","owner":"spiffe","description":"The SPIFFE Project","archived":false,"fork":false,"pushed_at":"2025-03-15T23:52:26.000Z","size":912,"stargazers_count":1556,"open_issues_count":37,"forks_count":164,"subscribers_count":82,"default_branch":"main","last_synced_at":"2025-04-05T02:01:37.759Z","etag":null,"topics":["cncf","identity","spiffe"],"latest_commit_sha":null,"homepage":"http://spiffe.io","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE-OF-CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":"GOVERNANCE.md","roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2017-08-07T20:45:21.000Z","updated_at":"2025-04-04T18:31:19.000Z","dependencies_parsed_at":"2023-02-17T22:46:26.956Z","dependency_job_id":"b2d12b50-ba85-48ec-a701-417aae579c9f","html_url":"https://github.com/spiffe/spiffe","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fspiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fspiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fspiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fspiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/spiffe/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248518977,"owners_count":21117752,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cncf","identity","spiffe"],"created_at":"2024-08-02T05:00:59.551Z","updated_at":"2025-04-12T04:40:22.228Z","avatar_url":"https://github.com/spiffe.png","language":"Shell","funding_links":[],"categories":["Others (28)","Open Source Projects at HPE","cncf","Backend frameworks \u0026 libraries","Security \u0026 Compliance","Shell"],"sub_categories":[],"readme":"![SPIFFE Logo](https://github.com/spiffe/spiffe/blob/main/community/logo/256x1024.png?raw=true)\n\n\n\n\n[![Production Phase](https://github.com/spiffe/spiffe/blob/main/.img/maturity/prod.svg)](https://github.com/spiffe/spiffe/blob/main/MATURITY.md#production)\n\nThe Secure Production Identity Framework For Everyone (SPIFFE) Project defines a framework and set of\nstandards for identifying and securing communications between application services. At its core, SPIFFE is:\n\n* A standard defining how services identify themselves to each other. These are called *SPIFFE IDs* and are implemented as [Uniform Resource Identifiers (URIs)](https://en.wikipedia.org/wiki/Uniform_Resource_Identifier).\n\n* A standard for encoding SPIFFE IDs in a cryptographically-verifiable document called a SPIFFE Verifiable Identity Document or *SVIDs*.\n\n* An API specification for issuing and/or retrieving SVIDs. This is the *Workload API*.\n\nThe SPIFFE Project has a reference implementation, the SPIRE (the SPIFFE Runtime Environment), that in addition to the above, it:\n\n* Performs node and workload attestation.\n\n* Implements a signing framework for securely issuing and renewing SVIDs.\n\n* Provides an API for registering nodes and workloads, along with their designated SPIFFE IDs.\n\n* Provides and manages the rotation of keys and certs for mutual authentication and encryption between workloads.\n\n* Simplifies access from identified services to secret stores, databases, services meshes and cloud provider services.\n\n* Interoperability and federation to SPIFFE compatible systems across heterogeneous environments and administrative trust boundaries.\n\n\nSPIFFE is a [graduated](https://www.cncf.io/projects/spiffe/) project of the [Cloud Native Computing Foundation](https://cncf.io) (CNCF). If you are an organization that wants to help shape the evolution of technologies that are container-packaged, dynamically-scheduled and microservices-oriented, consider joining the CNCF.\n\n## SPIFFE Standards\n\n* [Secure Production Identity Framework for Everyone (SPIFFE)](standards/SPIFFE.md)\n* [The SPIFFE Identity and Verifiable Identity Document](standards/SPIFFE-ID.md)\n* [The X.509 SPIFFE Verifiable Identity Document](standards/X509-SVID.md)\n* [The JWT SPIFFE Verifiable Identity Document](standards/JWT-SVID.md)\n* [The SPIFFE Trust Domain and Bundle](standards/SPIFFE_Trust_Domain_and_Bundle.md)\n* [The SPIFFE Workload Endpoint](standards/SPIFFE_Workload_Endpoint.md)\n* [The SPIFFE Workload API](standards/SPIFFE_Workload_API.md)\n* [SPIFFE Federation](standards/SPIFFE_Federation.md)\n\n## Getting Started\n\n* [spiffe](https://github.com/spiffe/spiffe): This repository includes the SPIFFE ID, SVID and Workload API specifications, example code, and tests, as well as project governance, policies, and processes.    \n* [spire](https://github.com/spiffe/spire): This is a reference implementation of SPIFFE and the SPIFFE Workload API that can be run on and across varying hosting environments.\n* [go-spiffe](https://github.com/spiffe/go-spiffe/tree/main/v2): Golang client libraries.\n* [java-spiffe](https://github.com/spiffe/java-spiffe): Java client libraries\n\n### Communications\n\n  * [Slack](https://spiffe.slack.com) (Join [here](https://slack.spiffe.io)).\n  * \u003cannounce@spiffe.io\u003e (View or join [here](https://groups.google.com/a/spiffe.io/forum/#!forum/announce)).\n  * \u003cdev-discussion@spiffe.io\u003e (View or join [here](https://groups.google.com/a/spiffe.io/forum/#!forum/dev-discussion)).\n  * \u003cuser-discussion@spiffe.io\u003e (View or join [here](https://groups.google.com/a/spiffe.io/forum/#!forum/user-discussion)).\n\n### Contribute\n\n* [CONTRIBUTING](/CONTRIBUTING.md)\n* [GOVERNANCE](/GOVERNANCE.md)\n\n### SIGs \u0026 Working Groups\u003ca name=\"sigs\"\u003e\u003c/a\u003e\n\nMost community activity is organized into Special Interest Groups (SIGs), time-bounded working groups, and our monthly community-wide meetings. SIGs follow these [guidelines](GOVERNANCE.md#special-interest-groups-sigs), although each may operate differently depending on their needs and workflows. Each group's material can be found in the [/community](/community) directory of this repository.\n\n| Name | Lead | Group | Slack Channel | Meetings |\n|:------:|:-------:|:-------:|:---------------:|:----------:|\n| [SIG-Community](/community/sig-community/README.md) | [Umair Khan](https://github.com/umairmkhan) (HPE) | [Here](https://groups.google.com/a/spiffe.io/g/sig-community) | [Here](https://spiffe.slack.com/messages/community) | [Notes](https://docs.google.com/document/d/1tb3lxubwr8IKRd6Smnl83ur14xkOQdjwQqla9OHjwZo) |\n| [SIG-Spec](/community/sig-spec/README.md) | [Evan Gilman](https://github.com/evan2645) (VMware) | [Here](https://groups.google.com/a/spiffe.io/forum/#!forum/sig-specification) | [Here](https://spiffe.slack.com/messages/sig-spec) | [Notes](https://docs.google.com/document/d/1f64vbyn5sOb8Mr1H3mGGGul3vTKo4r6cTBcUV3N9OFo) |\n| [SIG-SPIRE](/community/sig-spire/README.md) | [Daniel Feldman](https://github.com/dfeldman) (HPE) | [Here](https://groups.google.com/a/spiffe.io/forum/#!forum/sig-spire) | [Here](https://spiffe.slack.com/messages/spire) | [Notes](https://docs.google.com/document/d/1IgpCkvSRSoY9Xd16gFQJJ1KP8sLZ7EE39cEjBK_UIg4) |\n\n**Follow the SPIFFE Project** You can find us on [Github](https://github.com/spiffe/) and [Twitter](https://twitter.com/SPIFFEio).\n\n## SPIFFE SSC\nThe [SPIFFE Steering Committee](/GOVERNANCE.md#the-spiffe-steering-committee-ssc) meets on a regular cadence to review project progress, address maintainer needs, and provide feedback on strategic direction and industry trends. Community members interested in joining this call can find details below.\n\n* Calendar: [iCal](https://calendar.google.com/calendar/ical/c_gck7v87m9obq6n3hpo01l7csus%40group.calendar.google.com/public/basic.ics) or [Browser-based](https://calendar.google.com/calendar/embed?src=c_gck7v87m9obq6n3hpo01l7csus%40group.calendar.google.com\u0026ctz=America%2FChicago)\n* Meeting Notes: [Google Doc](https://docs.google.com/document/d/14YlmMTqwqNdx-CWapwwIBMaakH5Z2UnAvOBQBB8AwQM)\n* Call Details: [Zoom Link](https://zoom.us/j/95959131216?pwd=akw4RzlEUEVCTnFkWE5KdWFPZXpkdz09)\n\nTo contact the SSC privately, please send an email to [ssc@spiffe.io](mailto:ssc@spiffe.io).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fspiffe%2Fspiffe","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fspiffe%2Fspiffe","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fspiffe%2Fspiffe/lists"}