SPIFFE Helper
Radar: Initial
Apache-2.0
Fetches SVIDs from the Workload API and writes them to disk, restarting or signalling a process on rotation — how software that cannot speak SPIFFE still gets a SPIFFE identity.
SPIFFE
Specifications it implements
What this tool does to each specification, in the role vocabulary. Follow a standard through to standards.apievangelist.com for what it actually specifies.
| Standard | Role | What that means |
|---|---|---|
| SPIFFE | issues |
Using this from an agent
- Interfaces
clicontainer- Emits
- x509, jwt
- Runtime
- Runs offline Non-deterministic Writes Needs credentials
Where it applies
Jobs this tool actually does, and the surface each one is exercised on.
Give workload identity to a legacy application that only knows how to read a certificate file.
ci-pipelinecoding-agent
The pragmatic adoption path — no application change, just certificates appearing on disk and being rotated underneath.
- Website
- https://github.com/spiffe/spiffe-helper
- Repository
- https://github.com/spiffe/spiffe-helper
- License
- Apache-2.0 — reported by the GitHub API, verified 2026-08-11
- Stars
- 75 · last commit 2026-08-07
Reading this as an agent? Don't scrape the page — this entry is published as
structured data at
arrow_back
All tools by adoption
/tools.json,
against the tool.schema.json
schema, using the roles.json
vocabulary. Start at /llms.txt.