python-tuf

python-tuf copied to clipboard

docs: Include the relevant securesystemslib classes in docs

2

`Signer`, `Signature` (and in future maybe most of `Key`) are really part of the Metadata API but are technically implemented in securesystemslib. We should either include those in the python-tuf...

jku

securesystemslib import fails

1

From https://github.com/theupdateframework/python-tuf/actions/runs/3249189713/jobs/5331305228 A test file import fails on windows at `from securesystemslib.signer import Signature, SSlibSigner` (flaky). This is likely https://github.com/secure-systems-lab/securesystemslib/issues/428. ``` ERROR: test_api (unittest.loader._FailedTest) ---------------------------------------------------------------------- ImportError: Failed to import test...

jku

build(deps): bump the test-and-lint-dependencies group with 3 updates

2

Bumps the test-and-lint-dependencies group with 3 updates: [coverage](https://github.com/nedbat/coveragepy), [ruff](https://github.com/astral-sh/ruff) and [mypy](https://github.com/python/mypy). Updates `coverage` from 7.4.4 to 7.5.0 Changelog Sourced from coverage's changelog. Version 7.5.0 — 2024-04-23 Added initial support for...

dependabot[bot]

WIP: Update to new securesystemslib API

3

### Update to new (currently unreleased) securesystemslib API * API changes covered: * keys and interface modules removed * SSlibSigner removed * CryptoSigner added: this replaces the removed functionality *...

jku

Enable linters

2

Enable linters: * flake8-unused-arguments * flake8-executable * pygrep-hooks * flake8-pie * flake8-pyi * flake8-raise * flake8-self These were all low hanging fruit where ruff can autofix or where there were...

jku

possible blog post: Caching TUF metadata

3

I've spent far too long in the past week looking at CDN logs... I collected some notes from this, and wrote a first draft of a blog post or something....

jku

SimpleEnvelope._DEFAULT_PAYLOAD_TYPE should be public?

1

ngclient accesses `SimpleEnvelope._DEFAULT_PAYLOAD_TYPE`. flake8-self linter complains about this, I think correctly. If we use the value from a different module, it should be public CC @lukpueh for comment

jku

user-agent should maybe mention "python"?

1

User agent set in tuf/ngclient/_internal/requests_fetcher.py is `tuf/5.0.0` -- this looks good but I think should be `python-tuf/5.0.0` instead as it should identify the complete project when visible in an access...

jku

Make Implementations command/code copy-pastable

1

Please fill in the fields below to submit an issue or feature request. The more information that is provided, the better. **Description of issue or feature request**: Currently, the [implementation...

h4l0gen

Workflow for monitoring issues for staleness

3

Please fill in the fields below to submit an issue or feature request. The more information that is provided, the better. **Description of issue or feature request**: GitHub action for...

h4l0gen