Cross Domain · security identity · CNCF — graduated

SPIFFE

SPIFFE (Secure Production Identity Framework for Everyone) is a graduated CNCF set of specifications for workload identity. It defines a URI naming scheme for workloads, verifiable identity documents (SVIDs) in X.509 and JWT form, and a Workload API for obtaining them without embedded credentials.

spiffe.io/The standard

CNCF — graduatedGoverning body · Linux Foundation

2018First published

Unversioned (living specification)Current version

Yes — Protocol BuffersMachine-readable schema · open

0providers in the catalog

Also known as Secure Production Identity Framework for Everyone, SPIFFE ID, SVID.

Providers that carry SPIFFE 0

No provider in the catalog carries this standard as a tag yet. That is a statement about the catalog's tagging, not about adoption: a provider that implements SPIFFE and says so in its APIs.json profile appears here on the next build. Add or correct a listing.

Read from the API Evangelist standards directory, facts verified 2026-08-17. Provider links come from the catalog's own identity tags and are rebuilt nightly. If this page is wrong about a standard or a provider, say so.