python-tuf
python-tuf copied to clipboard
Python reference implementation of The Update Framework (TUF)
pydocstyle D400: First line should end with a period Signed-off-by: Fridolin Pokorny
Metadata.sign(): ```python try: signature = signer.sign(bytes_data) except Exception as e: raise UnsignedMetadataError("Problem signing the metadata") from e ``` The reason we're catching Exception is that we have no idea what...
This happens on every windows builds but does not show up as overall failure since publish has been flaky. ``` Submitting coverage to coveralls.io... Traceback (most recent call last): File...
Please fill in the fields below to submit an issue or feature request. The more information that is provided, the better. **Description of issue or feature request**: In the basic_repo.py...
Once #2193 is merged, there is a repository module. The module is not really tested but should be. It's entirely possible that the module can't really be effectively unit tested...
Snapshot and Timestamp constructors try to be clever: self.meta = meta if meta is not None else {"targets.json": MetaFile(1)} and self.snapshot_meta = snapshot_meta or MetaFile(1) So they set the metafile...
This is not full thought out but I'm filing so it's not forgotten. https://docs.google.com/document/d/1QWBvpwYxOy9njAmd8vpizNQpPti9rd5ugVhji0r3T4c Sigstore client wants to use TUF to download files but wants to avoid the two mandatory...
**Description of issue or feature request**: As a result of discussion in https://github.com/theupdateframework/python-tuf/pull/2234, opening this issue to make consensus on eventually declaring public API directly in Python sources. **Current behavior**:...
In #2193 the client example gains Trust-On-First-Use (TOFU) functionality and support for arbitrary repositories. This is very useful for testing but has two issues: * we should also be an...
**Description of issue or feature request**: Getting the following errors on running `python3 aggregate_tests.py ` from within the `tests/` directory. **Current behavior**: ``` ====================================================================== ERROR: test_metadata_generation (unittest.loader._FailedTest) ---------------------------------------------------------------------- ImportError: Failed...