smallstep / certificates
🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
- Stars
- 9,062 stars
- Forks
- 616 forks
- Language
- Go
- License
- APACHE-2.0
- Created
- Nov 1, 2018
- Last push
- Nov 10, 2026
- Updated
- Nov 11, 2026
Why these Tags: an agent read the README and quoted it
- TLS certificate tool from the readme:
`step-ca` is an online certificate authority for secure, automated certificate management for DevOps.
- SSH tool from the readme:
Delegate SSH authentication to `step-ca` by using SSH certificates instead of public keys and `authorized_keys` files
An agent gave these Tags from the fixed Tag list in the AwesomeRepos source code. A code check kept each Tag only when its quote is in the text. A wrong Tag? Report an error with the form at the end of this page.
Admitted to the Repository Index on Nov 10, 2026: 9,051 stars on 2026-11-10.
Star History
188 days recorded, May 8, 2026 – Nov 11, 2026 (UTC). Net change +651 stars.
The star count of each day is the latest count minus the net stars of the later days.
Add this Star History to a README
The images follow the light or dark theme of the page that shows them, and update every hour.
Add ?theme=light or ?theme=dark
to the chart address to keep one theme.
Star History chart
[](https://awesomerepos.com/smallstep/certificates) Badge
[](https://awesomerepos.com/smallstep/certificates) Timeline
It gained stars on 181 of the 188 days recorded since May 8, 2026.
Its largest 7 days were Sep 3, 2026 to Sep 9, 2026: 50 stars.
In the 30 days to Nov 11, 2026 it got 124 stars, 25% more than in the 30 days before.
It had 8,411 stars before May 8, 2026 and has 9,062 stars now: 938 fewer than 10,000.
- Created on the Repository Host
- Release v0.28.4: Step CA v0.28.4 (25-07-14)
- Release v0.29.0: Step CA v0.29.0 (25-12-03)
- Release v0.30.0
- Release v0.30.1: Step CA v0.30.1 (26-03-19)
- Release v0.30.2: Step CA v0.30.2 (26-03-23)
- +17 stars in one day
- +10 stars in one day
- Largest star day recorded: +22 stars
- Entered the Repository Index: 9,051 stars on 2026-11-10
- Latest push
The timeline comes from the creation date and the releases on the Repository Host, the Admission, the Star History, and the Observations. Star milestones show only when the Star History records the day. The list shows up to 5 stable releases from the latest 10 releases recorded. When none of them is stable, one item counts the pre-releases. On the chart of net stars each day, a solid line marks each recorded release.
Forks and pushes
From 2 Observations, Nov 11, 2026 – Nov 12, 2026. Forks +1. AwesomeRepos saw a new push on 0 of 1 days.
- Nov 12, 2026: no new push
A filled day: the last push time changed since the Observation before it.
Health facts
Measured facts in four separate dimensions, each with a date and a source. AwesomeRepos does not add them into one score. AwesomeRepos reads the weekly commits, the changelog, and the community files each week for the 5,000 visible repositories with the most stars and for each rising repository. How AwesomeRepos defines each check
Maintenance
2 of 4 checks (2 without data)-
Yes: Not archived
GitHub does not mark the repository as archived. Source
-
Yes: A push in the last 90 days
Last push on 2026-11-10, 2 days ago. Source
-
No data: Commits in the last 13 weeks
No data: AwesomeRepos has not read the weekly commits.
-
No data: Commits in 26 or more of the last 52 weeks
No data: AwesomeRepos has not read the weekly commits.
Releases
2 of 3 checks (1 without data)-
Yes: A release in the last 365 days
Newest release v0.30.2 on 2026-03-23, 234 days ago. 9 releases in the last 365 days. Source
-
Yes: The newest release tag is a semantic version
The newest release tag is v0.30.2. Source
-
No data: A changelog file at the root
No data: AwesomeRepos has not scanned this repository.
Security practice
0 of 1 check (1 without data)-
No data: A security policy
No data: AwesomeRepos has not scanned this repository.
AwesomeRepos has not asked OpenSSF Scorecard about this repository.
Community files
1 of 3 checks (2 without data)-
Yes: A licence
GitHub finds the licence APACHE-2.0. Source
-
No data: A contributing guide
No data: AwesomeRepos has not scanned this repository.
-
No data: A code of conduct
No data: AwesomeRepos has not scanned this repository.
Dependencies in the index
This section shows the packages that connect this repository to other repositories in the index.
The GitHub dependency graph of this repository names 53 direct packages (scanned on Nov 12, 2026). Packages from 20 other repositories in the index are among them.
3 scanned repositories name a package from this repository.
Uses (in the index) · 20
- hashicorp/vault 37K
Go: github.com/hashicorp/vault/api, github.com/hashicorp/vault/api/auth/approle, github.com/hashicorp/vault/api/auth/aws, github.com/hashicorp/vault/api/auth/kubernetes
- stretchr/testify 26K
Go: github.com/stretchr/testify
- sirupsen/logrus 26K
Go: github.com/sirupsen/logrus
- urfave/cli 24K
Go: github.com/urfave/cli
- grpc/grpc-go 23K
Go: google.golang.org/grpc
- go-chi/chi 23K
Go: github.com/go-chi/chi/v5
- slackhq/nebula 19K
Go: github.com/slackhq/nebula
- dgraph-io/badger 16K
Go: github.com/dgraph-io/badger, github.com/dgraph-io/badger/v2
-
GitHub Actions: actions/checkout
- pkg/errors 8.3K
Go: github.com/pkg/errors
Show all 20
- google/uuid 6.2K
Go: github.com/google/uuid
-
Go: github.com/prometheus/client_golang
- google/go-cmp 4.7K
Go: github.com/google/go-cmp
-
Go: cloud.google.com/go/longrunning, cloud.google.com/go/security
-
Go: google.golang.org/api
- rs/xid 4.3K
Go: github.com/rs/xid
- coreos/go-oidc 2.5K
Go: github.com/coreos/go-oidc/v3
- fxamacker/cbor 1.1K
Go: github.com/fxamacker/cbor/v2
-
Go: github.com/newrelic/go-agent/v3
-
Go: github.com/ccoveille/go-safecast/v2
Used by (in the index) · 3
-
Go: github.com/smallstep/certificates
-
Go: github.com/smallstep/certificates
-
Go: github.com/smallstep/certificates
Sources: the GitHub dependency graph of each repository, and deps.dev for the source repository of each package (checked on Nov 6, 2026). A dependency graph also names development packages. deps.dev takes most source repositories from package metadata. How the dependency graph is made
Observations
Latest Observation, Nov 12, 2026: 9,062 stars, 616 forks, last push Nov 10, 2026, not archived. One of 2 Observations since Nov 11, 2026.