theupdateframework go-tuf issues

theupdateframework / go-tuf

Go implementation of The Update Framework (TUF)

https://theupdateframework.com

Apache License 2.0

634 stars 108 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

TUF v0.7.0 tarball is 404

#659 jas4711 opened 3 days ago
1
fix: multirepo potential nil pointer dereference

#658 MrDan4es closed 2 weeks ago
2
docs: Joshua retiring as a maintainer

#657 joshuagl closed 3 weeks ago
0
Move the repository package under examples/repository

#656 rdimitrov closed 1 month ago
0
Issue a release for legacy go-tuf with a deprecated notice for all packages

#655 rdimitrov opened 1 month ago
0
Make repository.repositoryType public (repository.RepositoryType)

#654 eikenb closed 1 month ago
3
Error in case the delegated role is missing from the snapshot

#652 rdimitrov closed 2 months ago
0
Fix branch name in multi-repo client example

#651 rdimitrov closed 2 months ago
0
Update the staging TUF repo in the multi-repo example

#650 rdimitrov closed 2 months ago
1
tests: Run tuf-conformance tests

#649 jku opened 3 months ago
0
[do-not-merge] testing ci.yaml workflow

#648 timothyalexandersoftware closed 3 months ago
0
Update MAINTAINERS.md

#647 trishankatdatadog closed 4 months ago
0
chore(deps): bump github.com/sigstore/sigstore from 1.8.4 to 1.8.7

#646 dependabot[bot] opened 4 months ago
1
Increase the default value for MaxRootRotations

#645 kommendorkapten closed 4 months ago
0
I increase the default `MaxRootRotations` value for the updater config.

#644 kommendorkapten closed 4 months ago
2
chore(deps): bump github.com/sigstore/sigstore from 1.8.4 to 1.8.6

#643 dependabot[bot] closed 4 months ago
1
Add the ability to customize the HTTP user agent

#642 steiza closed 5 months ago
2
export API to set RefTime of Updater

#641 AdamKorcz closed 5 months ago
4
chore(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1

#640 dependabot[bot] closed 5 months ago
0
temporary file creation for persisted metadata

#639 mrjoelkamp closed 5 months ago
3
fix: configurable temp file directory

#638 mrjoelkamp closed 5 months ago
15
chore(deps): bump github.com/sigstore/sigstore from 1.8.3 to 1.8.4

#637 dependabot[bot] closed 5 months ago
0
Update MAINTAINERS

#636 trishankatdatadog closed 6 months ago
5
feat: add missing CODEOWNERS and MAINTAINERS file

#635 MDr164 closed 7 months ago
1
Add SLSA provenance

#634 udf2457 opened 7 months ago
1
Remove nil error from being printed in "persist metadata" error message

#633 malancas closed 7 months ago
1
fix: deep targets file path

#632 mrjoelkamp closed 7 months ago
2
bug: deep target file paths for consistent snapshots

#631 mrjoelkamp closed 7 months ago
0
Custom user agent string

#630 kommendorkapten closed 4 months ago
3
fix: use SHA384 for ECDSA P384

#629 mrjoelkamp closed 8 months ago
1
bug: hash algorithm defaults to SHA256 for most algorithms

#628 mrjoelkamp closed 8 months ago
0
chore(deps): bump github.com/sigstore/sigstore from 1.8.2 to 1.8.3

#627 dependabot[bot] closed 8 months ago
0
Fixes README references from rdimitrov/go-tuf-metadata to theupdateframework/go-tuf

#626 rdimitrov closed 9 months ago
0
Use the correct verifier for RSA PSS scheme keys

#625 rdimitrov opened 9 months ago
3
repository_simulator_setup.go: Use filepath.Join() instead of concatenation

#624 udf2457 closed 9 months ago
0
feat: automatically comment on PR for govulncheck

#623 MDr164 closed 3 months ago
5
chore(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3

#622 dependabot[bot] closed 9 months ago
3
chore(deps): bump golang.org/x/crypto from 0.20.0 to 0.21.0

#621 dependabot[bot] closed 9 months ago
2
chore(deps): use stdlib ed25519 instead of x

#620 MDr164 closed 9 months ago
1
Silence govulncheck

#619 MDr164 closed 9 months ago
9
chore(ci): bump action hashes

#618 MDr164 closed 9 months ago
1
feat: replace logrus in sim with slog

#617 MDr164 closed 9 months ago
3
chore(deps): bump golang.org/x/crypto from 0.19.0 to 0.20.0

#616 dependabot[bot] closed 9 months ago
2
chore(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0

#615 dependabot[bot] closed 9 months ago
3
chore(deps): bump github.com/sigstore/sigstore from 1.8.1 to 1.8.2

#614 dependabot[bot] closed 9 months ago
1
Failing to rotate timestamp keys: tuf: failed to decode timestamp.json: tuf: valid signatures did not meet threshold

#613 wmnnd closed 9 months ago
3
Always use forward slash when splitting target names

#612 kommendorkapten closed 9 months ago
1
Use filepath.Join when combining filesystem components

#611 kommendorkapten closed 9 months ago
3
chore(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0

#610 dependabot[bot] closed 9 months ago
1
Consider deprecating use of third-party logging libraries in favour of stdlib (log/slog) ?

#609 udf2457 closed 9 months ago
9