It’s been just over two years now since the SPIFFE (Secure Production Identity Framework For Everyone) and SPIRE (the SPIFFE Runtime Environment) projects joined the Cloud Native Computing Foundation (CNCF), and now the projects have moved on from the sandbox level to the incubation level, joining numerous incubation-level projects, such as OpenTracing, gRPC, Linkerd, Rook, etcd, CloudEvents, Argo, and more. The move signifies that the projects have met a number of requirements, such as a diversity of maintainers and production use-cases, and have passed a security audit, which resulted in no critical errors.