#spiffe

Binding a logical agent to a real workload with SPIRE Part 2 used a SPIRE JWT-SVID as the...

The architecture diagram was the easy part. In Your SPIFFE workload can authenticate as an Entra...

SPIFFE with Microsoft Entra Agent ID sounds almost too tidy. Let SPIRE attest an AI agent running in...

If you run SPIRE, are you SPIFFE compliant? How far do you have to go with a custom implementation? I read the spiffe/spiffe spec end to end and pulled out the MUST requirements for SPIFFE-ID, X.509-SVID, JWT-SVID, Workload API, and Trust Bundle.

Omega is a v0 control plane that ships SPIFFE-compatible workload identity and an OpenID AuthZEN 1.0 PDP (Cedar) in one Apache-2.0 binary.

On March 2, 2026, four engineers from Defakto Security, AWS, Zscaler, and Ping Identity published...

Workload identity has become a foundational primitive in modern infrastructure. Static credentials do...

We take a source-code level deep dive into the internal implementation of SPIFFE/SPIRE, the standard for 'Workload Identity' in the cloud-native environment.