spiffe

    spiffe/spire

    The SPIFFE Runtime Environment

    backend
    Go
    Apache-2.0
    2.6K stars
    688 forks
    2.6K GitHub watchers
    Updated Oct 27, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    5 releases in the last 90 days, the latest 7 days ago, with 252 contributors on GitHub.

    Peaked at #75 in the weekly ranking the week of Mar 29, its best in the past year.

    Use Cases & Benefits

    • Provides a runtime environment to establish secure trust between software systems using SPIFFE standards.
    • Enables workload identity attestation and issuance of cryptographic identities across diverse platforms for seamless mutual authentication.
    • Use for implementing workload identity and secure service-to-service authentication in microservices architectures.
    • Use for integrating with Envoy Proxy to automate TLS certificate management via SPIRE's Secret Discovery Service.
    • Use for securely authenticating workloads to secret stores, databases, or cloud services using SPIFFE-issued identities.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    Apache 2.0

    Permissive: commercial use, modification and redistribution are allowed with attribution; includes an explicit patent grant from contributors.

    Community files

    • README: present
    • Contributing guide: present
    • Code of conduct: present

    Watch-outs

    No watch-outs from GStars' checks.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    SPIRE (the SPIFFE Runtime Environment) is a toolchain of APIs for establishing trust between software systems across a wide variety of hosting platforms. SPIRE exposes the SPIFFE Workload API, which can attest running software systems and issue SPIFFE IDs and SVIDs to them. This in turn allows two workloads to establish trust between each other, for example by establishing an mTLS connection or by signing and verifying a JWT token. SPIRE can also enable workloads to securely authenticate to a secret store, a database, or a cloud provider service.

    SPIRE is a graduated project of the Cloud Native Computing Foundation (CNCF). If you are an organization that wants to help shape the evolution of technologies that are container-packaged, dynamically-scheduled and microservices-oriented, consider joining the CNCF.

    Excerpt from the spiffe/spire README on GitHub (Apache-2.0 license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Forks

    688+51

    Open issues

    115-16

    Compared with peers in Backend

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth

    spiffe/spire compared with Backend repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    anthropics/skills187.8K+2.9K15—
    DuarteSantos8/openGym19.7K+2.4K602 days ago
    shiyu-coder/Kronos47.0K+2.3K16—
    NationalSecurityAgency/ghidra98.2K+2.3K6414 days ago
    microsoft/VibeVoice56.0K+1.1K29—
    spiffe/spire2.6K—657 days ago
    Category median56.0K+2.3K29—

    Discover Repositories

    Search across tracked repositories by name or description