All pull requests

Pull requests

• Metadata API: Reject non-canonical bin names in SuccinctRoles

  #3034·Anandb71 opened Oct 18, 2026·

  ·
  1

  2

• Test the trusted metadata chain with DSSE envelopes

  #3032·Harshil-1603 opened Oct 14, 2026·

  ·

• Make updater configuration immutable

  #3028·Harshil-1603 opened Oct 12, 2026·

  ·
  1

• Reject delegated role names that match a top-level role in any case

  #3011·arpitjain099 opened Sep 4, 2026Contributor·

  ·
  3

• ngclient: Update root.json link atomically

  #3010·Sachith77 opened Sep 3, 2026Contributor·

  ·
  2

• Add a post on ML-DSA support in TUF

  #2999·jku opened Aug 25, 2026Member·

  ·

• Fix __hash__ crashing on unhashable dict attributes

  #2995·Sachith77 opened Aug 24, 2026Contributor·

  ·
  16

• ngclient: add download_target_bytes()

  #2992·ChrisJr404 opened Aug 18, 2026·

  ·
  1

  3

• tests: Add end-to-end test for the examples

  #2948·arpitjain099 opened Jun 3, 2026Contributor·2 of 3 tasks·

  ·
  6

• Add retry logic for streaming timeout errors in Urllib3Fetcher

  #2896·ishaanxgupta opened Jan 7, 2026·

  ·
  1

  10

• Advisory locking for metadata and artifacts files

  #2861·jku opened Aug 29, 2025Member·

  ·
  19

• PoC: Release tuf with in-toto attestations and supply chain definition

  #2000·lukpueh opened May 9, 2022Member·3 tasks·

  ·
  1

  18