# Installer aws-spiffe-workload-helper avec Homebrew

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de aws-spiffe-workload-helper pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:aws-spiffe-workload-helper
```

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install aws-spiffe-workload-helper
```

  Preuve: local Homebrew formula metadata

## Faits du paquet

- **Clé du paquet:** brew:aws-spiffe-workload-helper
- **Gestionnaire de paquets:** Homebrew
- **Version:** 0.0.5
- **Résumé source:** Helper for providing AWS credentials to workloads using their SPIFFE identity
- **Page d'accueil:** <https://github.com/spiffe/aws-spiffe-workload-helper>
- **Dépôt:** <https://github.com/spiffe/aws-spiffe-workload-helper>
- **Dernière mise à jour:** 2026-07-27T09:34:50-04:00
- **Généré:** 2026-08-03T19:37:03+00:00

## exécutables

- aws-spiffe-workload-helper (alias)

## Comportement d'installation

- Bouteille: non disponible

## Version et fraîcheur

- page générée: 2026-08-03
- version du gestionnaire: 0.0.5
## Historique du projet et usages

AWS SPIFFE Workload Helper is a SPIFFE project helper for obtaining AWS credentials from SPIFFE workload identities.

### Historique du projet

The official README describes the helper as a lightweight tool for providing workloads with AWS credentials using SPIFFE identity, with support for X.509 SVIDs through AWS Roles Anywhere and JWT SVIDs through AssumeRoleWithWebIdentity.

### Historique d'adoption

The repository is a SPIFFE tiny-project and remains a narrow integration tool rather than a broad CLI ecosystem. Its GitHub releases reached v0.0.5 on February 16, 2026.

### Modes d'utilisation

Users configure AWS SDKs and CLIs by setting `credential_process` in `~/.aws/config` to invoke `aws-spiffe-workload-helper`. The helper can return credentials to stdout or write a user-specified credential file for legacy consumers.

### Pourquoi les passionnés de paquets s'y intéressent

The package is notable because it bridges SPIFFE Workload API identity, AWS Roles Anywhere, AWS STS, and the AWS external credential process contract in a single distributable binary.

### Chronologie

- 2024: Initial public development began in the official repository.
- 2025: Early v0.0.x releases were published.
- 2026: v0.0.5 was published on GitHub Releases.

### Related projects

- SPIFFE and the SPIFFE Workload API provide the identity source.
- AWS Roles Anywhere and AWS STS AssumeRoleWithWebIdentity provide AWS credential exchange targets.
- AWS rolesanywhere-credential-helper is the AWS tool the README compares this helper against.

### Sources

- <https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithWebIdentity.html>
- <https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sourcing-external.html>
- <https://docs.aws.amazon.com/rolesanywhere/latest/userguide/introduction.html>
- <https://github.com/spiffe/aws-spiffe-workload-helper#readme>
- <https://github.com/spiffe/aws-spiffe-workload-helper/releases>


## Notes de sécurité

narrow executable package without higher-risk signals.

- **Risque Geiger:** vert / faible
- narrow executable package without higher-risk signals


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: ~/.aws/config

## Combined YAML source

View the package source record on GitHub. [combined/aws-spiffe-workload-helper.yml](https://github.com/mxcl/pkgdb/blob/main/combined/aws-spiffe-workload-helper.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- cross-ecosystem install command graph