vmware-archive / repository-editor-for-tuf

Command line tool for editing and maintaining a TUF repository
Apache License 2.0
5 stars 3 forks source link

Decide what to do with obsolete metadata versions that were never part of a snapshot #50

Open jku opened 2 years ago

jku commented 2 years ago

https://github.com/jku/tuf-demo/blob/master/metadata/1.demo-bin-00.json is an example of a targets file that was never part of a snapshot (v2 was first in snapshot but there were two commits so two versions).

Decide what to do -- maybe tool should notice and refuse to do the snapshot if there are files that are not in current or future snapshot ?