notary
notary copied to clipboard
Notary is a project that allows anyone to have trust over arbitrary collections of data
Fixes all pre Go 1.17.13 related CVEs in Notary. TODO: update Gorm from github.com/jinzhu/gorm to gorm.io/gorm to take advantage of latest gorm API updates. (requires some refactoring of the gorm...
This one-line change is a little bit less clean-looking than I'd like, but this makes sure it works on both Python 2 _and_ Python 3. :smile: I worked this up...
Close: #1625 the code change of this PR is done automatically by running "go mod tidy" after change `github.com/jinzhu/gorm v0.0.0-20170222002820-5409931a1bb8` to `gorm.io/gorm latest` in the go.mod file Verification: 1. Install...
Signed-off-by: Wang Yan
At work my team uses Notary and we encountered a serious inefficiency when it comes to database queries from the `tuf_files` table. The table lacks an index on the `gun`...
Bumps [github.com/docker/distribution](https://github.com/docker/distribution) from 2.7.1+incompatible to 2.8.0+incompatible. Release notes Sourced from github.com/docker/distribution's releases. v2.8.0 registry 2.8.0 Welcome to the v2.8.0 release of registry! The 2.8.0 registry release has been a long...
Signed-off-by: vikash2310
Hi all, Looking at the [documentation for key management](https://github.com/theupdateframework/notary/blob/master/docs/best_practices.md#expiration-prevention) and the expiry dates, can you please detail what the standard operational procedure would look like to renew certificates before they...
My team at work encountered a concurrency issue in 2 places of the [`tuf_store.go::GetChecksum`](https://github.com/notaryproject/notary/blob/master/server/storage/tuf_store.go#L110) function. This one is related to [`tuf_store.go:119`](https://github.com/notaryproject/notary/blob/master/server/storage/tuf_store.go#L119): ``` fatal error: concurrent map writes goroutine 18240 [running]:...
The README states the following ``` It has moved to https://github.com/theupdateframework/notary. Any downstream consumers should update their Go imports to use this new location, which will be the canonical location...