notaryproject
/
tuf
mirror of https://github.com/notaryproject/tuf.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
The Update Framework for OCI Registries
37 Commits 12 Branches 0 Tags 444 KiB
Go 95.3%
Makefile 4.7%
Go to file
Toddy Mladenov 7d5fe5e5ab
Org maintainers update (#48) 
* Adding CODEOWNERS and MAINTAINERS files

Signed-off-by: Toddy Mladenov <toddysm@gmail.com>

* Updated org maintainers

Signed-off-by: Toddy Mladenov <toddysm@gmail.com>

---------

Signed-off-by: Toddy Mladenov <toddysm@gmail.com>
 		2024-04-09 09:28:10 +08:00
.github/workflows Verify go fmt output is empty 2021-11-11 20:15:11 -05:00
cmd/tuf-notary Refactoring with Go project layout 2021-11-22 19:45:02 -05:00
demo Add tuf verification to demo 2021-10-07 11:17:46 -04:00
docs Refactoring with Go project layout 2021-11-22 19:45:02 -05:00
test/tuf-repo/staged Refactoring with Go project layout 2021-11-22 19:45:02 -05:00
.gitignore Adding a Makefile 2021-12-02 16:36:10 -05:00
CODEOWNERS Org maintainers update (#48) 2024-04-09 09:28:10 +08:00
MAINTAINERS Org maintainers update (#48) 2024-04-09 09:28:10 +08:00
Makefile Adding a Makefile 2021-12-02 16:36:10 -05:00
README.md doc: update readme.md (#45) 2023-08-18 09:13:13 +08:00
cli.md Add move command proposed documentation 2021-12-14 11:18:40 -05:00
go.mod Add registry upload tests 2021-11-02 11:49:32 -04:00
go.sum Fix formatting 2021-11-02 13:31:52 -04:00
registry-access.go Refactoring with Go project layout 2021-11-22 19:45:02 -05:00
registry-access_test.go Refactoring with Go project layout 2021-11-22 19:45:02 -05:00
tuf-repository.go Refactoring with Go project layout 2021-11-22 19:45:02 -05:00

README.md

TUF

This repository is not in active maintenance. Please see the Notary Project README file to learn about overall Notary Project.

TUF is a project to implement the full TUF specification in a registry native way. This may require upstream TUF spec changes or extensions, as there are some differences between the registry model and common usage to other TUF use cases. This project will use existing registry extensions where available but may need its own document types in addition.

The notary TUF-based implementation ran as an additional service on a registry, so was not available everywhere and did not create native registry artifacts. In turn this meant that moving signatures between registries was not supported. The notary TUF-based implementation also made some changes to the TUF security model, like defaulting to TOFU, which in retrospect were not a good model in a world of ephemeral cloud native hosts. It did not get widespread adoption due to these reasons and others. This project aims to build a version suitable for widespread adoption that resolves these issues.