# aws-spiffe-workload-helper を Homebrew でインストール aws-spiffe-workload-helper のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:aws-spiffe-workload-helper ``` 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install aws-spiffe-workload-helper ``` 証拠: local Homebrew formula metadata ## パッケージ情報 - **パッケージキー:** brew:aws-spiffe-workload-helper - **パッケージマネージャ:** Homebrew - **パッケージマネージャページ:** - **バージョン:** 0.0.5 - **ソース概要:** Helper for providing AWS credentials to workloads using their SPIFFE identity - **ホームページ:** - **リポジトリ:** - **ライセンス:** Apache-2.0 - **ソースアーカイブ:** - **最終更新:** 2026-07-27T09:34:50-04:00 - **生成日時:** 2026-08-04T22:13:35+00:00 ## 実行可能ファイル - aws-spiffe-workload-helper (cli) - aws-spiffe-workload-helper (エイリアス) ## ビルド依存関係 - go ## インストール挙動 - post-install フック: 未定義 - Bottle: 利用可能 対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## バージョンと鮮度 - ページ生成日: 2026-08-04 - マネージャ版: 0.0.5 - マネージャ更新日: 2026-07-27 - ローカルデータ: OK - 上流リポジトリ: https://github.com/spiffe/aws-spiffe-workload-helper - 検出された最新: v0.0.5 (最新) ## プロジェクトの歴史と使われ方 AWS SPIFFE Workload Helper is a SPIFFE project helper for obtaining AWS credentials from SPIFFE workload identities. ### プロジェクトの歴史 The official README describes the helper as a lightweight tool for providing workloads with AWS credentials using SPIFFE identity, with support for X.509 SVIDs through AWS Roles Anywhere and JWT SVIDs through AssumeRoleWithWebIdentity. ### 採用の歴史 The repository is a SPIFFE tiny-project and remains a narrow integration tool rather than a broad CLI ecosystem. Its GitHub releases reached v0.0.5 on February 16, 2026. ### 使われ方 Users configure AWS SDKs and CLIs by setting `credential_process` in `~/.aws/config` to invoke `aws-spiffe-workload-helper`. The helper can return credentials to stdout or write a user-specified credential file for legacy consumers. ### パッケージ好きにとっての重要性 The package is notable because it bridges SPIFFE Workload API identity, AWS Roles Anywhere, AWS STS, and the AWS external credential process contract in a single distributable binary. ### タイムライン - 2024: Initial public development began in the official repository. - 2025: Early v0.0.x releases were published. - 2026: v0.0.5 was published on GitHub Releases. ### Related projects - SPIFFE and the SPIFFE Workload API provide the identity source. - AWS Roles Anywhere and AWS STS AssumeRoleWithWebIdentity provide AWS credential exchange targets. - AWS rolesanywhere-credential-helper is the AWS tool the README compares this helper against. ### ソース - - - - - ## セキュリティノート narrow executable package without higher-risk signals. - **Geiger リスク:** グリーン / 低 - narrow executable package without higher-risk signals ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ~/.aws/config ## ソースデータベース詳細 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** aws-spiffe-workload-helper - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## 関連リンク - [Cloud CLI packages](https://pkg.so/ja/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Source-control packages](https://pkg.so/ja/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://pkg.so/ja/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/ja/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [go](https://pkg.so/ja/brew/go/) - Build dependency declared by Homebrew. - [okta-aws-cli](https://pkg.so/ja/brew/okta-aws-cli/) - Shares pkgdb curated category or tags: aws, cli, identity, security, sts. - [spiffe-helper](https://pkg.so/ja/brew/spiffe-helper/) - Shares pkgdb curated category or tags: cli, identity, security, spiffe. - [okta-awscli](https://pkg.so/ja/brew/okta-awscli/) - Shares pkgdb curated category or tags: aws, cli, identity, security. - [opensaml](https://pkg.so/ja/brew/opensaml/) - Shares pkgdb curated category or tags: cli, identity, security. - [aws-vault](https://pkg.so/ja/brew/aws-vault/) - Shares pkgdb curated category or tags: aws, cli, security, sts. - [saml2aws](https://pkg.so/ja/brew/saml2aws/) - Shares pkgdb curated category or tags: aws, cli, security, sts. - [granted](https://pkg.so/ja/brew/granted/) - Shares pkgdb curated category or tags: aws, cli, identity, security. - [rolesanywhere-credential-helper](https://pkg.so/ja/brew/rolesanywhere-credential-helper/) - Shares pkgdb curated category or tags: aws, cli, roles-anywhere, security. - [aws-vault-binary](https://pkg.so/ja/cask/aws-vault-binary/) - Security-sensitive metadata or terminology overlaps. Shared terms: aws, cli, credentials, security, sts. ## Combined YAML source View the package source record on GitHub. [combined/aws-spiffe-workload-helper.yml](https://github.com/mxcl/pkgdb/blob/main/combined/aws-spiffe-workload-helper.yml) ## ソース - pkg.so package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - cross-ecosystem install command graph