workload-identity
Skill, MIT licence, checked 6 November 2026
Playbook for service-to-service identity: pick SPIFFE or SPIRE versus cloud IAM, deploy SPIRE on EKS, federate trust domains, bridge to clouds via OIDC.
- Category
- Security operations
- Collections
- Cloud and infrastructure
Workload identity playbook (SPIFFE/SPIRE, cloud IAM, OIDC federation). Workflows for picking SPIFFE vs cloud IAM, deploying SPIRE on EKS, federating trust domains, bridging to AWS/GCP/Azure via OIDC, and migrating off long-lived workload secrets. Use when designing or hardening service-to-service au
Source
- Publisher
- d-padmanabhan
- Pinned commit
6d349827656df47705bdf6666de594bee624a4a8- Licence
- MIT
Skills in this entry:
What we checked
Checked on 6 November 2026 with Spellwarden scanner 1.8.1 and rules 2026.11.1.
No open critical or high findings. 1 open medium or low finding.
| Skill | Curation score | Curated | Open findings | Accepted findings |
|---|---|---|---|---|
workload-identity | 9.2 of 12 | Yes | 0 critical, 0 high, 0 medium, 1 low | None |
Version
Version 1
Approved for the catalog on 6 November 2026.
Last commit on the repository's default branch at the check: 26 September 2026.
Install
Team and Enterprise organisations install this entry in one step. Spellwarden checks it again when it changes and tells them if it turns bad.
Checked by Spellwarden on 6 November 2026 with scanner rules 2026.11.1. This is not an endorsement by or of the publisher, and not a guarantee of safety. Names and trademarks belong to their owners. Report a problem or ask for removal.