tokenex
A Go library that exchanges identity tokens for temporary cloud credentials, with built-in support for AWS, GCP, Azure, OCI, Kubernetes and OAuth2.
Riptides Labs
The open-source side of Riptides: libraries, tools and demos for workload identity and secretless access. Riptides itself is runtime machine IAM for AI agents, at riptides.io.
Projects
Each one is open source on GitHub.
waterwheel New
Workload identity for Kubernetes: pods call AI and cloud APIs with short-lived tokens, and never hold a key.
keyledger
A terminal UI to inventory, health-check and track every API key issued across your AI providers.
libsigv4
A highly portable AWS SigV4 implementation in C.
oci-req-signer-c
A highly portable OCI request signer in C.
wsl2-kernel-headers
Kernel-devel trees for Microsoft's WSL2 kernels, as container images: the kernel headers WSL2 doesn't ship.
lima-templates
Lima VM templates we use to build and test against specific distro and kernel combinations.
core-demo
A demo of Riptides' core features on one Linux machine: augmentation, mTLS, passthrough and credential injection.