go-tuf

go-tuf copied to clipboard

rdimitrov

Moved from https://github.com/rdimitrov/go-tuf-metadata/issues/62, raised by @udf2457 ### Is your feature request related to a problem? Please describe. From my brief reading of the `metadata` code, at present your library appears...

rdimitrov

Moved from https://github.com/rdimitrov/go-tuf-metadata/issues/86 ### Describe the bug Currently a `Refresh()` can be done only once during the lifetime of an Updater. This is not optimal for long-living processes so it...

rdimitrov

The issue is about ensuring go-tuf-metadata handles concurrency safely and can be used in such environments. Motivated by https://github.com/sigstore/sigstore-go/pull/41#discussion_r1425937114 Moved from https://github.com/rdimitrov/go-tuf-metadata/issues/91

rdimitrov

unresolved reference AddKeyWithSchemeAndExpires()

2

I'm integrating `go-tuf` with a thin wrapper so I can use it with a Yubikey. For that I need to use a few of the functions from repo, one of...

udf2457

Decide on a deprecation strategy for migrating the code to a new Go-based TUF implementation - rdimitrov/go-tuf-metadata

15

The following issue is a placeholder for discussing the migration strategy of deprecating the current go-tuf code base in favor of https://github.com/rdimitrov/go-tuf-metadata. **Reason** The reasoning behind this is the discussions...

rdimitrov

Hey, it seems there's a newer version of the TUF specification - [v1.0.33](https://github.com/theupdateframework/specification/blob/v1.0.33/tuf-spec.md) The version which [theupdateframework/go-tuf](https://github.com/theupdateframework/go-tuf) states it supports is - [v1.0.32](https://github.com/theupdateframework/specification/blob/v1.0.32/tuf-spec.md) The following is a comparison of what...

github-actions[bot]

Support AWS KMS signing

2

Right now the only way of signing your metadata files is by using a local key file. Many users would prefer to store sensitive keys in KMS. tools like ['tuftool'](https://tuf-repo-cdn.sigstore.dev/targets.json)...

ChevronTango

feat: add missing CODEOWNERS and MAINTAINERS file

1

MDr164

fix: deep targets file path

1

## Summary * fixes bug in `DownloadTarget` for target files that are in subdirectories that are more than one level deep ## Fixes fixes https://github.com/theupdateframework/go-tuf/issues/631

mrjoelkamp