python-tuf
python-tuf copied to clipboard
theupdateframework
Python reference implementation of The Update Framework (TUF)
Updater should _in some way_ support parallel downloads. This came up because I found an obscure corner in pip that does index file downloads in parallel in pip (`pip list...
The [contribution docs say](https://github.com/theupdateframework/tuf/blob/develop/docs/GOVERNANCE.md#contributions), new software features or changes must be unit tested, but the current test suite is a mix of unit-, integration-, system-, regression-, etc. tests. It would...
```python class DerivedMetadata(Metadata): def ok(self): print("ok") md = DerivedMetadata.from_file("root.json") md.ok() # fails because md type is Metadata, not DerivedMetadata ``` This seems to happen because the construction path goes *...
From #1317: When client downloads files it does not always need them written into an actual file, often it just wants the content: providing API the returns just bytes would...
On my machine ~40% of the tests runtime (11seconds out of 27 seconds) seems to be spent on decrypting private keys. This seems unproductive. We should not encrypt the keys...
**Description of issue or feature request**: In a review of a pr adding additional classes in the metadata API, @sechkova noticed that we have hardcoded the usage of JSON files...
**Description of issue or feature request**: #781 updated tuf's downloader module to use [`requests`](https://github.com/psf/requests) instead of custom networking code, to fix issues with HTTPS proxies. This change, however, deprived TUF...
We are often asked the same questions regarding delegations, how to organize TUF metadata, key management, etc. There should be an FAQ page for these sorts of questions. The [Survivable...
Which exceptions should be handled, which exceptions should be propagated to the user? When should we use custom exceptions, when should we use built-in exceptions? etc... The Google Python style-guide...
We should do what in-toto does: have the test runner output much more logging but only for failing tests. This should be especially useful for CI but also for developers....
Metadata
Owner
Metadata
Python reference implementation of The Update Framework (TUF)