python-tuf icon indicating copy to clipboard operation
python-tuf copied to clipboard

Python reference implementation of The Update Framework (TUF)

Results 135 python-tuf issues
Sort by recently updated
recently updated
newest added

Related to issue https://github.com/theupdateframework/python-tuf/issues/1909 **Description of the changes being introduced by the pull request**: Add a basic example script showing all features of the succinct hash bin delegations and the...

Apparently this may have been why dependabot silently failed if setup.py was missing: https://github.com/dependabot/dependabot-core/pull/5392 We can try removing setup.py again (but check the dependabot logs to see that it really...

This change adds tests coverage for `path_hash_prefixes` and verifies that role names matching specific prefixed successfully find and download the corresponding metadata files and do not succeed to find existing,...

**Description of issue or feature request**: Currently, I am working to support succinct hash bin delegation as described in [TAP 15](https://github.com/theupdateframework/taps/blob/master/tap15.md) in [Repository Editor for TUF](https://github.com/vmware-labs/repository-editor-for-tuf). `Repository Editor for Tuf`...

discussion

**Description of issue or feature request**: Implement [TAP 14: Managing TUF versions](https://github.com/theupdateframework/taps/blob/master/tap14.md) **Current behavior**: TUF clients will not be able to safely update once the repository moves to a new...

• Commits `fc5bd5c` to `88c140a` are based around setting up a sample metadata structure inside the `repository` folder (which is inside `repository_data`) for testing • `774a039` is for reverting `repository`...

**Description of issue**: The client-example has a confusing return for the `download` function. The return mixes the error and flows handling. **Current behavior**: Currently, it returns a bool. - If...

*[Update 2/14/22]* - [ADR 10](https://github.com/theupdateframework/python-tuf/blob/develop/docs/adr/0010-repository-library-design.md) shows the updated direction of this issue including further reading (design document, prototype implementation) - Comments in thread here below point to survey documents for...

repository
discussion
backlog

There have been a few suggestions to document ngclient internals (or to publish that documentation): * RequestsFetcher * TrustedMetadataSet https://github.com/theupdateframework/python-tuf/issues/1543, https://github.com/theupdateframework/python-tuf/pull/1517#discussion_r694700337 I think we could talk a bit about RequestsFetcher...

documentation
backlog

**Description of issue or feature request**: In tests we use the home-made decorator `@utils.run_sub_tests_with_dataset` when we need to execute the same test case consecutively for many datasets. The decorator works...

enhancement
testing
good first issue