macOS
Homebrewverifiziert · 100%
brew install aws-spiffe-workload-helperlocal Homebrew formula metadata
brew / Rang 9424
aws-spiffe-workload-helper mit Homebrew installieren
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für aws-spiffe-workload-helper in AI-Agent-Workflows.
Installation
Weitere Installationsbefehle
Überblick
Paketzusammenfassung
Helper for providing AWS credentials to workloads using their SPIFFE identity
Projektlinks
Befehle und Aliase
- aws-spiffe-workload-helper
Verlauf
Projektgeschichte und Nutzung
AWS SPIFFE Workload Helper is a SPIFFE project helper for obtaining AWS credentials from SPIFFE workload identities.
Projektgeschichte
The official README describes the helper as a lightweight tool for providing workloads with AWS credentials using SPIFFE identity, with support for X.509 SVIDs through AWS Roles Anywhere and JWT SVIDs through AssumeRoleWithWebIdentity.
Adoptionsgeschichte
The repository is a SPIFFE tiny-project and remains a narrow integration tool rather than a broad CLI ecosystem. Its GitHub releases reached v0.0.5 on February 16, 2026.
Wie es verwendet wird
Users configure AWS SDKs and CLIs by setting `credential_process` in `~/.aws/config` to invoke `aws-spiffe-workload-helper`. The helper can return credentials to stdout or write a user-specified credential file for legacy consumers.
Warum Paket-Nerds sich dafür interessieren
The package is notable because it bridges SPIFFE Workload API identity, AWS Roles Anywhere, AWS STS, and the AWS external credential process contract in a single distributable binary.
Zeitleiste
- 2024: Initial public development began in the official repository.
- 2025: Early v0.0.x releases were published.
- 2026: v0.0.5 was published on GitHub Releases.
Related projects
- SPIFFE and the SPIFFE Workload API provide the identity source.
- AWS Roles Anywhere and AWS STS AssumeRoleWithWebIdentity provide AWS credential exchange targets.
- AWS rolesanywhere-credential-helper is the AWS tool the README compares this helper against.
Quellen
- https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithWebIdentity.html
- https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sourcing-external.html
- https://docs.aws.amazon.com/rolesanywhere/latest/userguide/introduction.html
- https://github.com/spiffe/aws-spiffe-workload-helper#readme
- https://github.com/spiffe/aws-spiffe-workload-helper/releases
Sicherheitslage
Risikostufe: grün
narrow executable package without higher-risk signals.
Risikoklassifikator
grün Risiko · niedrig Konfidenz · appliance
Warum
- narrow executable package without higher-risk signals
Signale
- metadata:no-higher-risk-signals
Installationsverhalten
- In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
- Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
- Build-Metadaten listen 1 Build-Abhängigkeiten.
Empfohlene Prüfung
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
~/.aws/config
Executables
Installierte Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
aws-spiffe-workload-helper | cli | globales Executable |
Aktualität
Version und Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Seite generiert2026-08-04
Manager-Version0.0.5
Manager aktualisiert2026-07-27
lokale DatenOK
Upstreamaktuell
neueste erkannte Versionv0.0.5
https://github.com/spiffe/aws-spiffe-workload-helper
- OKEs wurden keine Aktualitätswarnungen generiert.
Installationsmetadaten
Paketmetadaten
| Paketschlüssel | brew:aws-spiffe-workload-helper |
|---|---|
| Version | 0.0.5 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/aws-spiffe-workload-helper |
| Homepage | https://github.com/spiffe/aws-spiffe-workload-helper |
| Repository | https://github.com/spiffe/aws-spiffe-workload-helper |
| Lizenz | Apache-2.0 |
| Quellarchiv | https://github.com/spiffe/aws-spiffe-workload-helper/archive/refs/tags/v0.0.5.tar.gz |
| Zuletzt aktualisiert | 2026-07-27T09:34:50-04:00 |
| Pulse | updated |
| Build-Abhängigkeiten | go |
| Bottle | verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
Details aus der Quelldatenbank
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | aws-spiffe-workload-helper |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Quellspur
Aus Repository-Daten generiert
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
Combined YAML source
View the package source record on GitHub.
Verwendete Quellen
- Geiger risk classifier
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- package relationship graph
- package version freshness
- package-page enrichment
- pkg.so package database
- pkgdb category and tag curation