# Installer aws-spiffe-workload-helper avec Homebrew

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de aws-spiffe-workload-helper pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:aws-spiffe-workload-helper
```

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install aws-spiffe-workload-helper
```

  Preuve: local Homebrew formula metadata

## Faits du paquet

- **Clé du paquet:** brew:aws-spiffe-workload-helper
- **Gestionnaire de paquets:** Homebrew
- **Page du gestionnaire de paquets:** <https://formulae.brew.sh/formula/aws-spiffe-workload-helper>
- **Version:** 0.0.5
- **Résumé source:** Helper for providing AWS credentials to workloads using their SPIFFE identity
- **Page d'accueil:** <https://github.com/spiffe/aws-spiffe-workload-helper>
- **Dépôt:** <https://github.com/spiffe/aws-spiffe-workload-helper>
- **Licence:** Apache-2.0
- **Archive source:** <https://github.com/spiffe/aws-spiffe-workload-helper/archive/refs/tags/v0.0.5.tar.gz>
- **Dernière mise à jour:** 2026-07-27T09:34:50-04:00
- **Généré:** 2026-08-04T22:13:35+00:00

## exécutables

- aws-spiffe-workload-helper (cli)
- aws-spiffe-workload-helper (alias)

## Dépendances de compilation

- go

## Comportement d'installation

- hook post-installation: non défini
- Bouteille: disponible sur arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## Version et fraîcheur

- page générée: 2026-08-04
- version du gestionnaire: 0.0.5
- gestionnaire mis à jour: 2026-07-27
- données locales: OK
- dépôt amont: https://github.com/spiffe/aws-spiffe-workload-helper
- dernière version détectée: v0.0.5 (à jour)
## Historique du projet et usages

AWS SPIFFE Workload Helper is a SPIFFE project helper for obtaining AWS credentials from SPIFFE workload identities.

### Historique du projet

The official README describes the helper as a lightweight tool for providing workloads with AWS credentials using SPIFFE identity, with support for X.509 SVIDs through AWS Roles Anywhere and JWT SVIDs through AssumeRoleWithWebIdentity.

### Historique d'adoption

The repository is a SPIFFE tiny-project and remains a narrow integration tool rather than a broad CLI ecosystem. Its GitHub releases reached v0.0.5 on February 16, 2026.

### Modes d'utilisation

Users configure AWS SDKs and CLIs by setting `credential_process` in `~/.aws/config` to invoke `aws-spiffe-workload-helper`. The helper can return credentials to stdout or write a user-specified credential file for legacy consumers.

### Pourquoi les passionnés de paquets s'y intéressent

The package is notable because it bridges SPIFFE Workload API identity, AWS Roles Anywhere, AWS STS, and the AWS external credential process contract in a single distributable binary.

### Chronologie

- 2024: Initial public development began in the official repository.
- 2025: Early v0.0.x releases were published.
- 2026: v0.0.5 was published on GitHub Releases.

### Related projects

- SPIFFE and the SPIFFE Workload API provide the identity source.
- AWS Roles Anywhere and AWS STS AssumeRoleWithWebIdentity provide AWS credential exchange targets.
- AWS rolesanywhere-credential-helper is the AWS tool the README compares this helper against.

### Sources

- <https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithWebIdentity.html>
- <https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sourcing-external.html>
- <https://docs.aws.amazon.com/rolesanywhere/latest/userguide/introduction.html>
- <https://github.com/spiffe/aws-spiffe-workload-helper#readme>
- <https://github.com/spiffe/aws-spiffe-workload-helper/releases>


## Notes de sécurité

narrow executable package without higher-risk signals.

- **Risque Geiger:** vert / faible
- narrow executable package without higher-risk signals


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: ~/.aws/config
## Détails de la base source

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** aws-spiffe-workload-helper
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable


## Liens liés

- [Cloud CLI packages](https://pkg.so/fr/cloud-clis/) - Belongs to a cloud or infrastructure command family.
- [Source-control packages](https://pkg.so/fr/source-control-tools/) - Belongs to a source-control command family.
- [Terminal utility packages](https://pkg.so/fr/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://pkg.so/fr/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [go](https://pkg.so/fr/brew/go/) - Build dependency declared by Homebrew.
- [okta-aws-cli](https://pkg.so/fr/brew/okta-aws-cli/) - Shares pkgdb curated category or tags: aws, cli, identity, security, sts.
- [spiffe-helper](https://pkg.so/fr/brew/spiffe-helper/) - Shares pkgdb curated category or tags: cli, identity, security, spiffe.
- [okta-awscli](https://pkg.so/fr/brew/okta-awscli/) - Shares pkgdb curated category or tags: aws, cli, identity, security.
- [opensaml](https://pkg.so/fr/brew/opensaml/) - Shares pkgdb curated category or tags: cli, identity, security.
- [aws-vault](https://pkg.so/fr/brew/aws-vault/) - Shares pkgdb curated category or tags: aws, cli, security, sts.
- [saml2aws](https://pkg.so/fr/brew/saml2aws/) - Shares pkgdb curated category or tags: aws, cli, security, sts.
- [granted](https://pkg.so/fr/brew/granted/) - Shares pkgdb curated category or tags: aws, cli, identity, security.
- [rolesanywhere-credential-helper](https://pkg.so/fr/brew/rolesanywhere-credential-helper/) - Shares pkgdb curated category or tags: aws, cli, roles-anywhere, security.
- [aws-vault-binary](https://pkg.so/fr/cask/aws-vault-binary/) - Security-sensitive metadata or terminology overlaps. Shared terms: aws, cli, credentials, security, sts.

## Combined YAML source

View the package source record on GitHub. [combined/aws-spiffe-workload-helper.yml](https://github.com/mxcl/pkgdb/blob/main/combined/aws-spiffe-workload-helper.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- package-page enrichment
- curated configuration and credential file locations
- curated package history
- package version freshness
- pkgdb category and tag curation
- package relationship graph
- cross-ecosystem install command graph
