The Update Framework (TUF)

1–30 of 246

0 selected

Trishank Kuppusamy

Sep 8

[go-tuf] Security advisory (GHSA-3633-5h82-39pq): Improper handling of different key IDs for the same public keys in attacker-controlled metadata

Hello, We are writing to inform you of a high-impact but low-severity vulnerability in go-tuf clients

unread,

[go-tuf] Security advisory (GHSA-3633-5h82-39pq): Improper handling of different key IDs for the same public keys in attacker-controlled metadata

Hello, We are writing to inform you of a high-impact but low-severity vulnerability in go-tuf clients

Sep 8

May 13

TUF meetup at Kubecon Thu May 19th 11AM

Hi all, For those going to Kubecon next week: We're planning to do an informal TUF meetup 11AM on

unread,

TUF meetup at Kubecon Thu May 19th 11AM

Hi all, For those going to Kubecon next week: We're planning to do an informal TUF meetup 11AM on

May 13

Thibault Normand, … Lukas Puehringer14

Apr 19

Usage of existing crypto material serialization framework (JWK)

On 14.04.2022, at 15:46, 'Thibault Normand' via The Update Framework (TUF) <

unread,

Usage of existing crypto material serialization framework (JWK)

On 14.04.2022, at 15:46, 'Thibault Normand' via The Update Framework (TUF) <

Apr 19

Sumana Harihareswara, … Lukas Puehringer5

Apr 4

EuroPython call for talks closes in 3 days

Quick heads-up: Kairo and I have re-worked the proposal a bit and are now both listed as speakers for

unread,

EuroPython call for talks closes in 3 days

Quick heads-up: Kairo and I have re-worked the proposal a bit and are now both listed as speakers for

Apr 4

B. van Lunteren, … Jussi Kukkonen3

Apr 1

Inspecting trusted targets

Hi, TUF (as in the TUF specification) doesn't really provide any means for searching for things -

unread,

Inspecting trusted targets

Hi, TUF (as in the TUF specification) doesn't really provide any means for searching for things -

Apr 1

B. van Lunteren, … Trishank Kuppusamy6

Mar 24

Is python-tuf production ready?

On Thu, Mar 24, 2022 at 11:06 PM Joshua Lock <jlock@vmware.com> wrote: The python-tuf

unread,

Is python-tuf production ready?

On Thu, Mar 24, 2022 at 11:06 PM Joshua Lock <jlock@vmware.com> wrote: The python-tuf

Mar 24

Tim Lehnen, … Trishank Kuppusamy3

Mar 16

Drupal Association seeking contractor for server-side TUF implementation

Hi PHP friends, At the OpenSSF, we've formed a WG on securing community repos together. Would

unread,

Drupal Association seeking contractor for server-side TUF implementation

Hi PHP friends, At the OpenSSF, we've formed a WG on securing community repos together. Would

Mar 16

Lukas Puehringer

Feb 10

GitHub organization permission updates

Hello everyone! We updated the individual access levels for members and collaborators of the GitHub

unread,

GitHub organization permission updates

Hello everyone! We updated the individual access levels for members and collaborators of the GitHub

Feb 10

Marina Moore, … Joshua Lock3

12/10/21

TAP Acceptance at TUF Community Meeting

Unfortunately, I won't make the community meeting next week, so I have been looking at TAPs 13

unread,

TAP Acceptance at TUF Community Meeting

Unfortunately, I won't make the community meeting next week, so I have been looking at TAPs 13

12/10/21

Zach Wasserman, … Jussi Kukkonen4

9/1/21

Compromise of local repository in threat model

Just dug this thread from the spam folder so I'm a bit late to the discussion, apologies. I saw

unread,

Compromise of local repository in threat model

Just dug this thread from the spam folder so I'm a bit late to the discussion, apologies. I saw

9/1/21

8/26/21

Uptane Workshop

Hello, Uptane, the automotive variant of TUF, is having a workshop next month. The free registration

unread,

Uptane Workshop

Hello, Uptane, the automotive variant of TUF, is having a workshop next month. The free registration

8/26/21

Matt Rutkowski, … Trishank Kuppusamy3

8/19/21

Good examples of role-based CI/CD approval process signing/key construction/verification

On Thursday, August 19, 2021 at 1:35:00 PM UTC-4 sant...@nyu.edu wrote: I think in-toto (or a

unread,

Good examples of role-based CI/CD approval process signing/key construction/verification

On Thursday, August 19, 2021 at 1:35:00 PM UTC-4 sant...@nyu.edu wrote: I think in-toto (or a

8/19/21

8/19/21

TUF Community Meeting

Hi, The next TUF community meeting will be next week on August 25 at 11am EST. The agenda and meeting

unread,

TUF Community Meeting

Hi, The next TUF community meeting will be next week on August 25 at 11am EST. The agenda and meeting

8/19/21

7/28/21

Re: TUF Community Meeting

Sorry, I can't make it. We'll have to reschedule.

unread,

Re: TUF Community Meeting

Sorry, I can't make it. We'll have to reschedule.

7/28/21

Pedro Gabriel, Trishank Kuppusamy2

7/27/21

TUF vs GIthub Releaases + Webhooks

Sorry, I don't fully understand what you mean. Would you mind giving concrete examples? On Sat,

unread,

TUF vs GIthub Releaases + Webhooks

Sorry, I don't fully understand what you mean. Would you mind giving concrete examples? On Sat,

7/27/21

Tony Arcieri, … Trishank Kuppusamy7

7/22/21

Debian moving away from OpenPGP signatures

On Thu, Jul 22, 2021 at 9:17 AM Joshua Lock <jlock@vmware.com> wrote: I don't think they

unread,

Debian moving away from OpenPGP signatures

On Thu, Jul 22, 2021 at 9:17 AM Joshua Lock <jlock@vmware.com> wrote: I don't think they

7/22/21

Aditya Sirish A Yelgundhalli

6/24/21

Proposal of TAP-17 & Updates to POUF-1

Hello all, Marina Moore and I have co-authored TAP-17 which proposes removing the descriptions of

unread,

Proposal of TAP-17 & Updates to POUF-1

Hello all, Marina Moore and I have co-authored TAP-17 which proposes removing the descriptions of

6/24/21

4/21/21

TUF Community Meeting

Hi everyone, It's looking like time for another TUF community meeting. I made a doodle poll for

unread,

TUF Community Meeting

Hi everyone, It's looking like time for another TUF community meeting. I made a doodle poll for

4/21/21

Kainaat Singh, … Joshua Lock4

4/6/21

Running TUF tests

Hi Kainaat, Thanks for your interest in tuf and for working on a patch for issue #1297! We have some

unread,

Running TUF tests

Hi Kainaat, Thanks for your interest in tuf and for working on a patch for issue #1297! We have some

4/6/21

Joshua Lock, Trishank Kuppusamy2

2/25/21

Reference implementation will no longer support Python 2.7

Thanks, Joshua! This is such a big one, that I wonder whether it's worth advertising by

unread,

Reference implementation will no longer support Python 2.7

Thanks, Joshua! This is such a big one, that I wonder whether it's worth advertising by

2/25/21

Daniel Kaleja, … Marina Moore3

12/7/20

Clarification on tuf regarding repo and versioning

A small addition to Lukas's answer for number 3: In a variant of TUF for automobiles (Uptane), a

unread,

Clarification on tuf regarding repo and versioning

A small addition to Lukas's answer for number 3: In a variant of TUF for automobiles (Uptane), a

12/7/20

Hans Wurst, … Erick Tryzelaar8

12/7/20

Porting of TUF Client to embedded C/C++

Thank you all for your good and valuable information. Now I can estimate the afford I would be facing

unread,

Porting of TUF Client to embedded C/C++

Thank you all for your good and valuable information. Now I can estimate the afford I would be facing

12/7/20

Sumana Harihareswara, … Trishank Kuppusamy13

11/6/20

PEP 480 status, getting it ready to be reopened for discussion

On Fri, Nov 6, 2020 at 10:41 PM Joshua Lock <jlock@vmware.com> wrote: Do you have any more

unread,

PEP 480 status, getting it ready to be reopened for discussion

On Fri, Nov 6, 2020 at 10:41 PM Joshua Lock <jlock@vmware.com> wrote: Do you have any more

11/6/20

Sumana Harihareswara2

10/30/20

PyPI remote key generation and signing ceremony this Friday

This is happening now: https://www.youtube.com/watch?v=jjAq7S49eow On Wednesday, October 28, 2020 at

unread,

PyPI remote key generation and signing ceremony this Friday

This is happening now: https://www.youtube.com/watch?v=jjAq7S49eow On Wednesday, October 28, 2020 at

10/30/20

mulgu...@gmail.com, … Sumana Harihareswara13

9/2/20

Link to my Medium blog post on TUF

Yes, anyone on the Web has the right to link to any other resource publicly available on the Web.

unread,

Link to my Medium blog post on TUF

Yes, anyone on the Web has the right to link to any other resource publicly available on the Web.

9/2/20

mulgu...@gmail.com, Lukas Puehringer3

8/11/20

Is it ok to use TUF artwork in my blog on TUF?

Oh, looks like previously I didn't do a reply-all and instead replied only to Lukas. Hey Lukas,

unread,

Is it ok to use TUF artwork in my blog on TUF?

Oh, looks like previously I didn't do a reply-all and instead replied only to Lukas. Hey Lukas,

8/11/20

Prashanth M, Lukas Puehringer3

7/17/20

"keyid_hash_algorithms" attribute removed from TUF Spec 1.0.4 onwards?

Thanks Lukas! Will follow the discussion and go through the TAP. Regards Prashanth On Friday, July 17

unread,

"keyid_hash_algorithms" attribute removed from TUF Spec 1.0.4 onwards?

Thanks Lukas! Will follow the discussion and go through the TAP. Regards Prashanth On Friday, July 17

7/17/20

Trishank Karthik Kuppusamy

5/27/20

Meeting to discuss TAP 5

Hi everyone, Good to see some of you in the TUF community meeting earlier today! As mentioned in the

unread,

Meeting to discuss TAP 5

Hi everyone, Good to see some of you in the TUF community meeting earlier today! As mentioned in the

5/27/20

5/20/20

TUF Community Meeting

Hello, The next TUF community meeting will be Wednesday May 27 at 10am ET at https://meet.jit.si/

unread,

TUF Community Meeting

Hello, The next TUF community meeting will be Wednesday May 27 at 10am ET at https://meet.jit.si/

5/20/20

Trishank Karthik Kuppusamy

5/12/20

Combining TUF and in-toto to build compromise-resilient CI/CD

Hello everyone, We are pleased to announce that two new drafts of in-toto Enhancements (ITEs) have

unread,

Combining TUF and in-toto to build compromise-resilient CI/CD

Hello everyone, We are pleased to announce that two new drafts of in-toto Enhancements (ITEs) have

5/12/20

Search

Clear search

Close search

Google apps

Main menu