Skip to main content

spirldbg Releases

Latest Assets​

AssetLatest Release VersionLocation
Linux amd64v0.0.19https://spirl-releases.s3.us-west-2.amazonaws.com/spirldbg/v0.0.19/spirldbg-v0.0.19-linux-amd64.tar.gz
Linux arm64v0.0.19https://spirl-releases.s3.us-west-2.amazonaws.com/spirldbg/v0.0.19/spirldbg-v0.0.19-linux-arm64.tar.gz
macOS amd64v0.0.19https://spirl-releases.s3.us-west-2.amazonaws.com/spirldbg/v0.0.19/spirldbg-v0.0.19-darwin-amd64.tar.gz
macOS arm64v0.0.19https://spirl-releases.s3.us-west-2.amazonaws.com/spirldbg/v0.0.19/spirldbg-v0.0.19-darwin-arm64.tar.gz
Windows arm64v0.0.19https://spirl-releases.s3.us-west-2.amazonaws.com/spirldbg/v0.0.19/spirldbg-v0.0.19-windows-arm64.tar.gz
Windows amd64v0.0.19https://spirl-releases.s3.us-west-2.amazonaws.com/spirldbg/v0.0.19/spirldbg-v0.0.19-windows-amd64.tar.gz
Container Imagev0.0.19ghcr.io/spirl/spirldbg:v0.0.19

Release Notes​

spirldbg 0.0.19​

September 1, 2026

Enhancements​

  • Added broker-x509-svid, broker-x509-bundles, broker-jwt-svid, and broker-jwt-bundles commands, which act as a broker by connecting to an agent's Broker API unix socket over mTLS, presenting a broker identity, and fetching credentials on behalf of a referenced workload.
  • Added oauth-token command to exchange a JWT-SVID for an OAuth access token using the RFC 7523 jwt-bearer grant. Pass --dpop to bind the issued token to a proof-of-possession key (RFC 9449).
  • Added token-exchange command to perform an RFC 8693 delegated-token (OBO) exchange from a workload.
  • Added svid-wit and trust-bundle-wit commands to fetch a WIT-SVID and trust bundle from the Workload API.
  • svid-jwt now accepts multiple --audience flags to mint a JWT-SVID with a multi-valued aud claim in a single invocation. Additionally, --inspect was added to decode and check a JWT-SVID you already hold without fetching a new one (signature not verified).
  • network-diagnostics --connect now accepts both IPv4 and IPv6 addresses to force all diagnostic checks through a specific IP while still using --api-endpoint for TLS certificate verification.

spirldbg 0.0.18​

October 24th, 2025

Enhancements​

  • Adds a flag --raw to svid-jwt command to output the raw token without other text
  • Container images now use a distroless debug container with a shell

spirldbg 0.0.17​

October 8th, 2025

Security Fixes​

spirldbg 0.0.16​

August 26th, 2025

Enhancements​

  • Adds retries to fetch JWT and x509 commands to make spirldbg resilient to networking issues in the agent.

spirldbg 0.0.15​

June 23rd, 2025

Enhancements​

  • spirldbg: Adds identity-exchange-token flag to svid-jwt and svid-x509 commands to support OIDC JWT attestation for CI/CD clusters

spirldbg 0.0.14​

May 29th, 2025

Enhancements​

  • Add a subcommand for network diagnostics

spirldbg 0.0.13​

March 21st, 2025

Enhancements​

  • Adds JWT verification tospirldbg client and spirldbg server.
  • Adds spirldbg server and spirldbg client to setup a SPIFFE mTLS server and client.