Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat!: move rdimitrov/go-tuf-metadata to github.com/theupdateframework/go-tuf/v2 #583

Merged
merged 208 commits into from
Jan 29, 2024
Merged

feat!: move rdimitrov/go-tuf-metadata to github.com/theupdateframework/go-tuf/v2 #583

merged 208 commits into from
Jan 29, 2024

Commits on Jan 24, 2024

  1. Remove legacy go-tuf code 

    Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
    @rdimitrov
    rdimitrov committed Jan 24, 2024
    Configuration menu
    Copy the full SHA
    b76646f View commit details
    Browse the repository at this point in the history

Commits on Jan 25, 2024

  1. Initial commit 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    2f22f0a View commit details
    Browse the repository at this point in the history

  2. update basic_repo.go example 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    e3fb769 View commit details
    Browse the repository at this point in the history

  3. Update README.md

    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    f29347f View commit details
    Browse the repository at this point in the history

  4. update example to use the placeholder repo instance 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    7a97b4f View commit details
    Browse the repository at this point in the history

  5. implement verifiers for length and hash 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    3485d06 View commit details
    Browse the repository at this point in the history

  6. set consistent snapshots to true when init 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    de9cb26 View commit details
    Browse the repository at this point in the history

  7. add version check for metafiles 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    610ee9f View commit details
    Browse the repository at this point in the history

  8. remove delegations object when creating targets metadata 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    193985a View commit details
    Browse the repository at this point in the history

  9. use variable for custom values 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    f4f285b View commit details
    Browse the repository at this point in the history

  10. fix rsa and ecdsa key type support 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    ad6cffe View commit details
    Browse the repository at this point in the history

  11. implement GetRolesForTarget 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    1cff8e2 View commit details
    Browse the repository at this point in the history

  12. implement trusted metadata set 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    4dcbb08 View commit details
    Browse the repository at this point in the history

  13. tidy up code and rename repo to repository 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    43f8868 View commit details
    Browse the repository at this point in the history

  14. rename to go-tuf-metadata 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    a298a28 View commit details
    Browse the repository at this point in the history

  15. update README.md and testdata 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    c3b1ad4 View commit details
    Browse the repository at this point in the history

  16. proceed implementing the Updater - implement loadTargets 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    db83b72 View commit details
    Browse the repository at this point in the history

  17. complete the Updater implementation 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    4cc0bd6 View commit details
    Browse the repository at this point in the history

  18. ed25519 public key should be hex only 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    85d1591 View commit details
    Browse the repository at this point in the history

  19. restructure example folder 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    ca55d5a View commit details
    Browse the repository at this point in the history

  20. introduce logrus and restructure file layout 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    ceb1ffa View commit details
    Browse the repository at this point in the history

  21. add bsd-2 licensing 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    cf43183 View commit details
    Browse the repository at this point in the history

  22. Update license name so it matches the GitHub license keyword 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    ee8aeb4 View commit details
    Browse the repository at this point in the history

  23. add code of conduct, contributing and gitignore files 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    5aba429 View commit details
    Browse the repository at this point in the history

  24. update readme 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    aee21ad View commit details
    Browse the repository at this point in the history

  25. fix formatting for code of conduct 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    e762870 View commit details
    Browse the repository at this point in the history

  26. Create dependabot.yml

    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    ff78023 View commit details
    Browse the repository at this point in the history

  27. chore(deps): bump github.com/sigstore/sigstore from 1.4.4 to 1.5.0 

    Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.4.4 to 1.5.0.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.4.4...v1.5.0)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    877439d View commit details
    Browse the repository at this point in the history

  28. chore(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0 

    Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.4.0 to 0.5.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](golang/crypto@v0.4.0...v0.5.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    2441c9b View commit details
    Browse the repository at this point in the history

  29. chore: update code comments, license year and init testing (theupdate… 

    …framework#3)

* docs: add comments describing the different types

Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>

* chore: add golangci and codeql

Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>

* chore: begin adding tests

Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>

* chore: add licence notice

Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>

* chore: update licence year to 2023

Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>

* chore: fix linting error

Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>

* chore: temp limit ci to ubuntu so we don't waste GHA resources

Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>

Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    7f287d1 View commit details
    Browse the repository at this point in the history

  30. chore: add tests for metadata default values 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    20ebbef View commit details
    Browse the repository at this point in the history

  31. fix: rename master to main in ci.yml 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    dd441b7 View commit details
    Browse the repository at this point in the history

  32. fix: rename master to main in codeql-analysis.yml 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    d9c1dad View commit details
    Browse the repository at this point in the history

  33. chore: add badges for license and build status 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    2607e93 View commit details
    Browse the repository at this point in the history

  34. chore: add badge for pkg.go.dev 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    0ccff5e View commit details
    Browse the repository at this point in the history

  35. chore: add link to pkg.do.dev in README 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    0c3adfe View commit details
    Browse the repository at this point in the history

  36. chore(deps): bump github.com/sigstore/sigstore from 1.5.0 to 1.5.1 (t… 

    …heupdateframework#4)

Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.5.0 to 1.5.1.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.5.0...v1.5.1)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    5959691 View commit details
    Browse the repository at this point in the history

  37. add goreport badge to readme 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    0c59134 View commit details
    Browse the repository at this point in the history

  38. chore: add custom error types 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    5dcb5df View commit details
    Browse the repository at this point in the history

  39. chore: update gh workflow and README 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    c486b7f View commit details
    Browse the repository at this point in the history

  40. chore: refactor some of the comments 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    70dc7a6 View commit details
    Browse the repository at this point in the history

  41. fix: root update failed due to wrong err type check 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    d330e5b View commit details
    Browse the repository at this point in the history

  42. fix: target update length check 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    a6d6618 View commit details
    Browse the repository at this point in the history

  43. fix: handle target path matches correctly and add test cases 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    f50c97e View commit details
    Browse the repository at this point in the history

  44. fix: change default value for hash prefixed targets 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    15e2037 View commit details
    Browse the repository at this point in the history

  45. fix: populate TargetFiles.Path and do not fail when looking for cache… 

    …d target

Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    3a20d44 View commit details
    Browse the repository at this point in the history

  46. fix: revert deleted hexbytes methods 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    19bb59f View commit details
    Browse the repository at this point in the history

  47. fix: support python-tuf ecdsa keytype value 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    0990a83 View commit details
    Browse the repository at this point in the history

  48. feat: add initial version for client_example.go 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    fb693a0 View commit details
    Browse the repository at this point in the history

  49. fix: basic_repository.go: targetpath did not match the delegatee path… 

    … patern

Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    ba597e3 View commit details
    Browse the repository at this point in the history

  50. chore(deps): bump golang.org/x/crypto from 0.5.0 to 0.6.0 (theupdatef… 

    …ramework#5)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.5.0 to 0.6.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](golang/crypto@v0.5.0...v0.6.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    758d573 View commit details
    Browse the repository at this point in the history

  51. test: add test for ClearSignatures() 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    d1b22ba View commit details
    Browse the repository at this point in the history

  52. tests: add a few unit tests for metadata 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    7c4e6a2 View commit details
    Browse the repository at this point in the history

  53. tests: add tests for custom fields in the Signed part 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    a4613f6 View commit details
    Browse the repository at this point in the history

  54. chore: refactor client_example.go 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    5cb4701 View commit details
    Browse the repository at this point in the history

  55. chore(deps): bump github.com/secure-systems-lab/go-securesystemslib (#6) 

    Bumps [github.com/secure-systems-lab/go-securesystemslib](https://github.com/secure-systems-lab/go-securesystemslib) from 0.4.0 to 0.5.0.
- [Release notes](https://github.com/secure-systems-lab/go-securesystemslib/releases)
- [Commits](secure-systems-lab/go-securesystemslib@v0.4.0...v0.5.0)

---
updated-dependencies:
- dependency-name: github.com/secure-systems-lab/go-securesystemslib
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    ff14203 View commit details
    Browse the repository at this point in the history

  56. chore(deps): bump golang.org/x/net from 0.6.0 to 0.7.0 (#7) 

    Bumps [golang.org/x/net](https://github.com/golang/net) from 0.6.0 to 0.7.0.
- [Release notes](https://github.com/golang/net/releases)
- [Commits](golang/net@v0.6.0...v0.7.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    7e41c9f View commit details
    Browse the repository at this point in the history

  57. chore: disable length check until it is not reliable 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    66725e1 View commit details
    Browse the repository at this point in the history

  58. feat: add support for unrecognized json fields 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    525c190 View commit details
    Browse the repository at this point in the history

  59. chore: use Jussi's github demo as a repository for the client_example.go 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    6662679 View commit details
    Browse the repository at this point in the history

  60. fix: check for nil when marshaling unrecognized metadata fields 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    ab3f2d7 View commit details
    Browse the repository at this point in the history

  61. docs: update the readme 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    0ec31d1 View commit details
    Browse the repository at this point in the history

  62. fix: add workaround to support sslib key type value of ecdsa 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    9c80731 View commit details
    Browse the repository at this point in the history

  63. feat: add support for succinct roles and hashbin delegations 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    b62a1aa View commit details
    Browse the repository at this point in the history

  64. chore: add an option to specify trusted root path in Updater 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    df3e810 View commit details
    Browse the repository at this point in the history

  65. feat: add initial tuf-client cli 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    089c15b View commit details
    Browse the repository at this point in the history

  66. docs: update readme.md for client cli 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    48ff83e View commit details
    Browse the repository at this point in the history

  67. tests: fix custom field tests 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    4bc9ce9 View commit details
    Browse the repository at this point in the history

  68. fix: update golangci-lint config and fix reported errors 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    22df3da View commit details
    Browse the repository at this point in the history

  69. chore: remove false check for client_example.go 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    aa227e4 View commit details
    Browse the repository at this point in the history

  70. fix: codeql reported error 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    5636b72 View commit details
    Browse the repository at this point in the history

  71. chore: refactor package layout for tuf-client cli 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    f403fad View commit details
    Browse the repository at this point in the history

  72. chore(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#8) 

    Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.1 to 1.8.2.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.8.1...v1.8.2)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    e3ee907 View commit details
    Browse the repository at this point in the history

  73. chore(deps): bump github.com/sigstore/sigstore from 1.5.1 to 1.5.2 (#9) 

    Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.5.1 to 1.5.2.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.5.1...v1.5.2)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    c09e2c0 View commit details
    Browse the repository at this point in the history

  74. chore(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#10) 

    Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.6.0 to 1.6.1.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.6.0...v1.6.1)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    2a429c7 View commit details
    Browse the repository at this point in the history

  75. chore: delete NOTES.md file 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    cbe1d3b View commit details
    Browse the repository at this point in the history

  76. chore: add license notes and template the tuf repository cli 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    5eadd5f View commit details
    Browse the repository at this point in the history

  77. chore: add Makefile 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    e5831a4 View commit details
    Browse the repository at this point in the history

  78. chore: update readme 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    901c6d6 View commit details
    Browse the repository at this point in the history

  79. docs: fix typo 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    d7d6c3c View commit details
    Browse the repository at this point in the history

  80. docs: update readme.md 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    01743a1 View commit details
    Browse the repository at this point in the history

  81. docs: update readme.md 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    0b9b4bc View commit details
    Browse the repository at this point in the history

  82. docs: update readme.md 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    9d0057d View commit details
    Browse the repository at this point in the history

  83. chore: update readme and fix linting error 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    84ce7d2 View commit details
    Browse the repository at this point in the history

  84. chore: remove custom field from metafiles object 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    8c39f79 View commit details
    Browse the repository at this point in the history

  85. chore: update readme and directory layout for cli 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    9d92f46 View commit details
    Browse the repository at this point in the history

  86. chore: change tuf-client cli target flag name 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    f2fb66c View commit details
    Browse the repository at this point in the history

  87. chore: make clear ignore if not exists 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    4c66e3b View commit details
    Browse the repository at this point in the history

  88. chore: add example make target with root-signing repository 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    df62369 View commit details
    Browse the repository at this point in the history

  89. chore: remove leftover env vars in makefile 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    5e8d3ba View commit details
    Browse the repository at this point in the history

  90. chore(deps): bump golang.org/x/crypto from 0.6.0 to 0.7.0 (theupdatef… 

    …ramework#29)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.6.0 to 0.7.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](golang/crypto@v0.6.0...v0.7.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    6a77989 View commit details
    Browse the repository at this point in the history

  91. chore(deps): bump github.com/sigstore/sigstore from 1.5.2 to 1.6.0 (t… 

    …heupdateframework#28)

Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.5.2 to 1.6.0.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.5.2...v1.6.0)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    cb70d50 View commit details
    Browse the repository at this point in the history

  92. chore: test against root-signing sigstore repo 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    44e84f3 View commit details
    Browse the repository at this point in the history

  93. chore: remove custom field from top-level metadata 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    9876678 View commit details
    Browse the repository at this point in the history

  94. fix: hash-prefixed target files support 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    20ed0bf View commit details
    Browse the repository at this point in the history

  95. fix: make hash prefixed targetfiles enabled by default 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    0a12f5a View commit details
    Browse the repository at this point in the history

  96. chore: improve handling for unrecognised fields 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    0f30f9b View commit details
    Browse the repository at this point in the history

  97. tests: update unrecognised field tests 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    88b46cb View commit details
    Browse the repository at this point in the history

  98. chore: fix typo 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    1392149 View commit details
    Browse the repository at this point in the history

  99. chore: remove obsolete new lines 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    ffb58d4 View commit details
    Browse the repository at this point in the history

  100. feat: add support for getting all top-level targets 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    89455ce View commit details
    Browse the repository at this point in the history

  101. chore: support GetTrustedMetadataSet() with Updater 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    f3dbc5d View commit details
    Browse the repository at this point in the history

  102. feat: add option to disable local cache and refactor config usage 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    6e95a29 View commit details
    Browse the repository at this point in the history

  103. chore: pass trusted root path directly to config in examples 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    90c6f65 View commit details
    Browse the repository at this point in the history

  104. chore: return byte representation of a target 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    c81a12c View commit details
    Browse the repository at this point in the history

  105. feat: add support for bootstrapping a TUF client using root.json bytes 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    287a917 View commit details
    Browse the repository at this point in the history

  106. feat: add support for comparing target files 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    9f93f69 View commit details
    Browse the repository at this point in the history

  107. chore: move all marshal/unmarshal methods to a separate file 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    4c1b11a View commit details
    Browse the repository at this point in the history

  108. chore: move copyMapValues to marshal.go 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    120f108 View commit details
    Browse the repository at this point in the history

  109. chore: update client example 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    9b722b5 View commit details
    Browse the repository at this point in the history

  110. fix: wrong path to loadLocalMetadata and error comparing 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    aa3d6ea View commit details
    Browse the repository at this point in the history

  111. chore: update client example 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    4b13803 View commit details
    Browse the repository at this point in the history

  112. chore: remove duplicated function 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    36d1bc3 View commit details
    Browse the repository at this point in the history

  113. chore: initialize client only with root bytes 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    7bda5a0 View commit details
    Browse the repository at this point in the history

  114. chore: update examples with the new init format 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    214dbca View commit details
    Browse the repository at this point in the history

  115. feat: implement TAP4 - multirepo package 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    1e74607 View commit details
    Browse the repository at this point in the history

  116. chore: fix linting 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    d2b439c View commit details
    Browse the repository at this point in the history

  117. chore: fix linting 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    ff563e3 View commit details
    Browse the repository at this point in the history

  118. chore: fix remote url for multirepo example and update readme files 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    fc11a25 View commit details
    Browse the repository at this point in the history

  119. chore: remove unused variable 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    837cea0 View commit details
    Browse the repository at this point in the history

  120. chore: fix when we exit during multi-repo target lookup 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    9a83127 View commit details
    Browse the repository at this point in the history

  121. chore: update client example 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    47c4d5e View commit details
    Browse the repository at this point in the history

  122. chore: add another mapping to the multi-repo example 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    61253c8 View commit details
    Browse the repository at this point in the history

  123. chore: add demo targets to multi repo to download 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    037b37a View commit details
    Browse the repository at this point in the history

  124. chore: look for cached target too in multirepo client 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    0c4f6fb View commit details
    Browse the repository at this point in the history

  125. fix: handle error type comparision properly 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    b1f7718 View commit details
    Browse the repository at this point in the history

  126. chore: change multirepo client to initialize from bytes 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    0d151ba View commit details
    Browse the repository at this point in the history

  127. chore: fix linting 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    32632e6 View commit details
    Browse the repository at this point in the history

  128. chore: update GetTopLevelTargets and make client config public 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    84eb553 View commit details
    Browse the repository at this point in the history

  129. chore: update multi-repo example 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    ba7cd43 View commit details
    Browse the repository at this point in the history

  130. chore: update multi-repo example 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    7bed7d5 View commit details
    Browse the repository at this point in the history

  131. chore: update license headers 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    fd677fb View commit details
    Browse the repository at this point in the history

  132. chore: update multirepo search to fail when it finds more than one match 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    a0b4548 View commit details
    Browse the repository at this point in the history

  133. chore: update comment in multirepo 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    29c3a03 View commit details
    Browse the repository at this point in the history

  134. chore: update comment in multirepo.go 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    0003677 View commit details
    Browse the repository at this point in the history

  135. chore(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 (theupda… 

    …teframework#31)

Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.6.1 to 1.7.0.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.6.1...v1.7.0)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    43b2b8b View commit details
    Browse the repository at this point in the history

  136. chore(deps): bump golang.org/x/crypto from 0.7.0 to 0.8.0 (theupdatef… 

    …ramework#33)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.7.0 to 0.8.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](golang/crypto@v0.7.0...v0.8.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    34e03d9 View commit details
    Browse the repository at this point in the history

  137. chore(deps): bump github.com/sigstore/sigstore from 1.6.0 to 1.6.1 (t… 

    …heupdateframework#32)

Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.6.0 to 1.6.1.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.6.0...v1.6.1)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    c8eb46b View commit details
    Browse the repository at this point in the history

  138. chore(deps): bump github.com/sigstore/sigstore from 1.6.1 to 1.6.2 (t… 

    …heupdateframework#34)

Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.6.1 to 1.6.2.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.6.1...v1.6.2)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    fa3eea3 View commit details
    Browse the repository at this point in the history

  139. chore(deps): bump github.com/sigstore/sigstore from 1.6.2 to 1.6.3 (t… 

    …heupdateframework#35)

Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.6.2 to 1.6.3.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.6.2...v1.6.3)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    992981f View commit details
    Browse the repository at this point in the history

  140. chore(deps): bump github.com/sigstore/sigstore from 1.6.3 to 1.6.4 (t… 

    …heupdateframework#36)

Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.6.3 to 1.6.4.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.6.3...v1.6.4)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    d7771e3 View commit details
    Browse the repository at this point in the history

  141. chore(deps): bump golang.org/x/crypto from 0.8.0 to 0.9.0 (theupdatef… 

    …ramework#38)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.8.0 to 0.9.0.
- [Commits](golang/crypto@v0.8.0...v0.9.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    0de8d9c View commit details
    Browse the repository at this point in the history

  142. chore(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (th… 

    …eupdateframework#40)

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.2 to 1.8.3.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.8.2...v1.8.3)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    0c9a2de View commit details
    Browse the repository at this point in the history

  143. chore(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 (the… 

    …updateframework#39)

Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) from 1.9.0 to 1.9.2.
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.0...v1.9.2)

---
updated-dependencies:
- dependency-name: github.com/sirupsen/logrus
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    6f101d6 View commit details
    Browse the repository at this point in the history

  144. chore(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 (the… 

    …updateframework#41)

Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) from 1.9.2 to 1.9.3.
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.2...v1.9.3)

---
updated-dependencies:
- dependency-name: github.com/sirupsen/logrus
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    1817640 View commit details
    Browse the repository at this point in the history

  145. chore(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (th… 

    …eupdateframework#42)

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.3 to 1.8.4.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.8.3...v1.8.4)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    b2248be View commit details
    Browse the repository at this point in the history

  146. chore(deps): bump github.com/sigstore/sigstore from 1.6.4 to 1.6.5 (t… 

    …heupdateframework#43)

Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.6.4 to 1.6.5.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.6.4...v1.6.5)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    16b055b View commit details
    Browse the repository at this point in the history

  147. chore: update make targets 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    c3f90d3 View commit details
    Browse the repository at this point in the history

  148. chore: update metadata files for multirepo example 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    0fb5822 View commit details
    Browse the repository at this point in the history

  149. chore: update multirepo example so trusted root meta is copied to cli… 

    …ent folder

Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    5d2ca98 View commit details
    Browse the repository at this point in the history

  150. chore: init goreleaser 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    6ea63a0 View commit details
    Browse the repository at this point in the history

  151. Add unit tests for config / fetcher / repo (theupdateframework#44) 

    * Add unit test for metadata config

This change adds tests for initializing metadata config

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Add unit tests for Fetcher

This change tests the DownloadFile functionality of Fetcher covering
both use-cases of failed download and a successful root role
download of a real test repo

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Add unit tests for repository type

This change adds test coverage for repository checking that all
roles once set are as expected

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

---------

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>
    @ivanayov @rdimitrov
    ivanayov authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    439d902 View commit details
    Browse the repository at this point in the history

  152. chore(deps): bump golang.org/x/crypto from 0.9.0 to 0.10.0 (theupdate… 

    …framework#48)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.9.0 to 0.10.0.
- [Commits](golang/crypto@v0.9.0...v0.10.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    214bd9a View commit details
    Browse the repository at this point in the history

  153. chore(deps): bump github.com/sigstore/sigstore from 1.6.5 to 1.7.0 (t… 

    …heupdateframework#49)

Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.6.5 to 1.7.0.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.6.5...v1.7.0)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    879dae9 View commit details
    Browse the repository at this point in the history

  154. tests: update fetcher tests (theupdateframework#47) 

    * tests: update fetcher tests

Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>

* fix: fix generic metadata unrecognized fields

Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>

---------

Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    499364f View commit details
    Browse the repository at this point in the history

  155. fix: fix UnmarshalJSON overwrite methods 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    4e9ebfa View commit details
    Browse the repository at this point in the history

  156. test: run all examples as partial e2e verification 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    1705e7c View commit details
    Browse the repository at this point in the history

  157. fix: remove sync lock for keyID generation 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    a601b2c View commit details
    Browse the repository at this point in the history

  158. chore(deps): bump github.com/sigstore/sigstore from 1.7.0 to 1.7.1 (t… 

    …heupdateframework#50)

Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.7.0 to 1.7.1.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.7.0...v1.7.1)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    86db62c View commit details
    Browse the repository at this point in the history

  159. chore(deps): bump golang.org/x/crypto from 0.10.0 to 0.11.0 (theupdat… 

    …eframework#51)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.10.0 to 0.11.0.
- [Commits](golang/crypto@v0.10.0...v0.11.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    f164dd8 View commit details
    Browse the repository at this point in the history

  160. chore(deps): bump github.com/secure-systems-lab/go-securesystemslib (t… 

    …heupdateframework#52)

Bumps [github.com/secure-systems-lab/go-securesystemslib](https://github.com/secure-systems-lab/go-securesystemslib) from 0.6.0 to 0.7.0.
- [Release notes](https://github.com/secure-systems-lab/go-securesystemslib/releases)
- [Commits](secure-systems-lab/go-securesystemslib@v0.6.0...v0.7.0)

---
updated-dependencies:
- dependency-name: github.com/secure-systems-lab/go-securesystemslib
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    3f37cb5 View commit details
    Browse the repository at this point in the history

  161. test: add metadata unit tests (theupdateframework#45) 

    * Add test repository data

This change adds repository data to use in unit testing, keeping
it the same as in python-tuf

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Add file system simulator

This change adds a mock for os functions

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Add test client simulator

This change implements client simulator for working with local
repositories

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Add metadata unit tests

This change adds unit tests for part of the metadata methods

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Add metadata api tests

This change implements api unit tests for metadata with the same
logic as in python-tuf

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Fix go linter in test simulators

This change fixes go linter error of not checking errors returned
by methods in the file system and test client simulators

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Create clean test metadata repository

As the `signature` package allows loading keys from RSA PEM files
only, the keys and roles from the python-tuf implementation are
not suitable for the current implementation. This is why a clean
repo is created with new keys in the appropriate format

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Add metadata sign/verify test

This change adds test coverage for signing and verigying metadata
with a pre-set keys

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Cleanup unnecessary functionality

This change removes unused keys and test utils for the metadata
unit tests. The removed test utils include filesystem simulator,
which is replaced by the setup functionality and some tidy-up
around the changes

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Fix metadata api tests to verify error type

This change updates error assertions in the metadata api tests
to compare error types rather than only a message

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Improve metadata tests

This change provides improvements to the metadata api tests

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

---------

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>
Co-authored-by: Ivana Atanasova <iyovcheva@iyovcheva7MD6R.vmware.com>
    @ivanayov @rdimitrov
    2 people authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    c57dd43 View commit details
    Browse the repository at this point in the history

  162. chore: add govulncheck and bump Go to 1.20 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    bc83b5e View commit details
    Browse the repository at this point in the history

  163. test: regenerate multirepo metadata 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    9e638c5 View commit details
    Browse the repository at this point in the history

  164. ci: separate examples from test workflows 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    a3ae2f8 View commit details
    Browse the repository at this point in the history

  165. chore(deps): bump golang.org/x/crypto from 0.11.0 to 0.12.0 (theupdat… 

    …eframework#53)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.11.0 to 0.12.0.
- [Commits](golang/crypto@v0.11.0...v0.12.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    9a9f485 View commit details
    Browse the repository at this point in the history

  166. chore(deps): bump github.com/sigstore/sigstore from 1.7.1 to 1.7.2 (t… 

    …heupdateframework#55)

Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.7.1 to 1.7.2.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.7.1...v1.7.2)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    55ff059 View commit details
    Browse the repository at this point in the history

  167. Metadata tests followup (theupdateframework#54) 

    * Fix AddKey for targets

Previously Targets' `AddKey(key, role)` was returning error that
role doesn't exist in the case when role exists and already has
that key. This change fixes that and alligns the function with the
python-tuf reference implementation, where the key is added to
delegations, even if it's not added to Roles and SuccinctRoles

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Fix delegated path prefix check

Previously the target file path hash was not base64 URL encoded
which ended up to not being able to properly compare if role's
PathHashPrefixes contains a prefix of that hash. This change
fixes the encoding

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Add SuccinctRoles.GetSuffixLen() for the purpose of testing

This allows testing if the suffix len is properly calculated in
the metadata

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Add test repository data improvements

This change changes the targets files used for targets metadata
to be simplified and neutral for the purpose of more clear and less
mistake-prone test cases. It also adds new keys for additional
metadata api testing

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Add more metadata api tests

This change completes the metadata api test coverage with
reference to the python-tuf implementations, excluding few use-
cases that are not applicable

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Fix go linter checks for metadata api tests

This fixes few error checks that were not handled in the metadata
api tests

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Improve metadata hepler test functions usage

This change provides tiny updates of two metalada helper functions
to giarantee more stable testing over time

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

---------

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>
    @ivanayov @rdimitrov
    ivanayov authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    91d8435 View commit details
    Browse the repository at this point in the history

  168. test: stop using succinct delegations in examples 

    Signed-off-by: Radoslav Dimitrov <dimitrovr@vmware.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    eb58c30 View commit details
    Browse the repository at this point in the history

  169. Add trusted metadata set tests (theupdateframework#56) 

    * Fix relative paths for testutils setup

This change allows using the testutils setup across all packages,
while previously it was using a correct path only for metadata

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Update snapshot meta files in test repo

This change adds delegated roles to snapshot meta for testing
trusted metadata and updates existing tests with the changes

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Add trusted metadata set tests

This change adds test coverage of 92% for trusted metadata set
corresponding to the python-tuf trusted metadata tests

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

---------

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>
    @ivanayov @rdimitrov
    ivanayov authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    f86ad41 View commit details
    Browse the repository at this point in the history

  170. chore: update URL for sigstore-tuf-root (theupdateframework#59) 

    Change to new CDN URL and regenerate example json files

Signed-off-by: Marvin Drees <marvin.drees@9elements.com>
    @MDr164 @rdimitrov
    MDr164 authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    51c8c2c View commit details
    Browse the repository at this point in the history

  171. test: convert config tests to table driven tests (theupdateframework#60) 

    Signed-off-by: Marvin Drees <marvin.drees@9elements.com>
    @MDr164 @rdimitrov
    MDr164 authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    f9a18ab View commit details
    Browse the repository at this point in the history

  172. feat: logger rework (theupdateframework#58) 

    * feat(log): add global default logger

Signed-off-by: Marvin Drees <marvin.drees@9elements.com>

* feat(log): exchange logger in library code

Signed-off-by: Marvin Drees <marvin.drees@9elements.com>

* feat(log): remove logrus from testutil

Signed-off-by: Marvin Drees <marvin.drees@9elements.com>

* feat(log): replace logrus in example code

Signed-off-by: Marvin Drees <marvin.drees@9elements.com>

* chore(log): run go mod tidy for new logger

Signed-off-by: Marvin Drees <marvin.drees@9elements.com>

* test: add tests for logger set/get functions

Signed-off-by: Marvin Drees <marvin.drees@9elements.com>

---------

Signed-off-by: Marvin Drees <marvin.drees@9elements.com>
    @MDr164 @rdimitrov
    MDr164 authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    8df1341 View commit details
    Browse the repository at this point in the history

  173. feat: fetcher timeout and length limit (theupdateframework#61) 

    * feat(fetcher): enable default client timeout

Signed-off-by: Marvin Drees <marvin.drees@9elements.com>

* feat(fetcher): re-enable Content-Length header check

Signed-off-by: Marvin Drees <marvin.drees@9elements.com>

* test(fetcher): update fetcher tests to table driven tests

Signed-off-by: Marvin Drees <marvin.drees@9elements.com>

---------

Signed-off-by: Marvin Drees <marvin.drees@9elements.com>
    @MDr164 @rdimitrov
    MDr164 authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    b38e4eb View commit details
    Browse the repository at this point in the history

  174. chore(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0 (theupdatefr… 

    …amework#63)

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.11.0 to 0.12.0.
- [Commits](golang/sys@v0.11.0...v0.12.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    4d49dcc View commit details
    Browse the repository at this point in the history

  175. Add updater tests (theupdateframework#65) 

    * Add repository simulator for testing updater

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Fix updater loadRoot

Previously the version was iterating as leq to the upperbound which
was causing errors and is incorrect. For comparison in the analogue
python-tuf implementation `range()` works as only `<` to the upper
bound

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Fix metadata IsDelegatedPath

Previously it was not always correclty checked. This change fixes
the path pattern check to be more presise

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Fix updater preOrderDepthFirstWalk

There was a bug in preOrderDepthFirstWalk to always break a loop
for a specific use-case, without `terminating` to be set to true

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Add updater tests

This change adds updater top level update and consistent snapshot
tests, using the repository simulator

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Fix failing tests

This change provides a fix for the failing CI due to logging
updates, as well as updater changes in main

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Fix linter issues

This change fixes go linter issues in the updater tests

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

* Fix updater tests: elements order mismatch

When testing if client fetches and stores delegated metadata files
with the correct version prefix when ConsistentSnapshot is true it
sometimes happens that the implementation of GetTargetInfo allows
differences in the order the roles are recorded in the FetchTraker.
This change fixes the test to not look into the order

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>

---------

Signed-off-by: Ivana Atanasova <iyovcheva@vmware.com>
    @ivanayov @rdimitrov
    ivanayov authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    3b7fce7 View commit details
    Browse the repository at this point in the history

  176. ci: properly calculate coverage for metadata package (theupdateframew… 

    …ork#68)

There was a missing flag in the CI to generate accurate coverage
reports for the metadata package. This will now cover all of the
metadata subfolder and exclude testutil and examples as those
are not part of the core library

Signed-off-by: Marvin Drees <marvin.drees@9elements.com>
    @MDr164 @rdimitrov
    MDr164 authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    3314bd1 View commit details
    Browse the repository at this point in the history

  177. chore(deps): bump github.com/sigstore/sigstore from 1.7.2 to 1.7.3 (t… 

    …heupdateframework#64)

Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.7.2 to 1.7.3.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.7.2...v1.7.3)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    eb5dee8 View commit details
    Browse the repository at this point in the history

  178. chore(deps): bump golang.org/x/crypto from 0.12.0 to 0.13.0 (theupdat… 

    …eframework#66)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.12.0 to 0.13.0.
- [Commits](golang/crypto@v0.12.0...v0.13.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    05f23f3 View commit details
    Browse the repository at this point in the history

  179. chore(deps): bump github.com/sirupsen/logrus from 1.9.1 to 1.9.3 (the… 

    …updateframework#69)

Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) from 1.9.1 to 1.9.3.
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.1...v1.9.3)

---
updated-dependencies:
- dependency-name: github.com/sirupsen/logrus
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    93c7d13 View commit details
    Browse the repository at this point in the history

  180. chore(deps): bump golang.org/x/crypto from 0.13.0 to 0.14.0 (theupdat… 

    …eframework#70)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.13.0 to 0.14.0.
- [Commits](golang/crypto@v0.13.0...v0.14.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    3de1ec4 View commit details
    Browse the repository at this point in the history

  181. chore(deps): bump golang.org/x/net from 0.14.0 to 0.17.0 (theupdatefr… 

    …amework#72)

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.14.0 to 0.17.0.
- [Commits](golang/net@v0.14.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    59ca549 View commit details
    Browse the repository at this point in the history

  182. chore(deps): bump github.com/sigstore/sigstore from 1.7.3 to 1.7.4 (t… 

    …heupdateframework#73)

Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.7.3 to 1.7.4.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.7.3...v1.7.4)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    c5675ad View commit details
    Browse the repository at this point in the history

  183. chore(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.3 (theup… 

    …dateframework#74)

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.55.0 to 1.56.3.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.55.0...v1.56.3)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    25fab3d View commit details
    Browse the repository at this point in the history

  184. fix: update examples with new jku/tuf-demo metadata 

    Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    4067d11 View commit details
    Browse the repository at this point in the history

  185. chore: bump go to 1.21 

    Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    3e5d150 View commit details
    Browse the repository at this point in the history

  186. chore(deps): bump github.com/sigstore/sigstore from 1.7.4 to 1.7.5 (t… 

    …heupdateframework#77)

Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.7.4 to 1.7.5.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.7.4...v1.7.5)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    9574caf View commit details
    Browse the repository at this point in the history

  187. chore(deps): bump github.com/go-logr/logr from 1.2.4 to 1.3.0 (theupd… 

    …ateframework#76)

Bumps [github.com/go-logr/logr](https://github.com/go-logr/logr) from 1.2.4 to 1.3.0.
- [Release notes](https://github.com/go-logr/logr/releases)
- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)
- [Commits](go-logr/logr@v1.2.4...v1.3.0)

---
updated-dependencies:
- dependency-name: github.com/go-logr/logr
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    b4a1983 View commit details
    Browse the repository at this point in the history

  188. chore(deps): bump golang.org/x/sys from 0.13.0 to 0.14.0 (theupdatefr… 

    …amework#78)

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.13.0 to 0.14.0.
- [Commits](golang/sys@v0.13.0...v0.14.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    426250f View commit details
    Browse the repository at this point in the history

  189. chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (theupda… 

    …teframework#79)

Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.7.0 to 1.8.0.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.7.0...v1.8.0)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    077b087 View commit details
    Browse the repository at this point in the history

  190. Add Trivy scan to workflow 

    Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    9b8deba View commit details
    Browse the repository at this point in the history

  191. Update README 

    Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    931f74a View commit details
    Browse the repository at this point in the history

  192. Use pinned actions 

    Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    a142637 View commit details
    Browse the repository at this point in the history

  193. Enroll go-tuf-metadata to Minder and store profile 

    Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    1bdd94e View commit details
    Browse the repository at this point in the history

  194. chore(deps): bump golang.org/x/crypto from 0.14.0 to 0.15.0 (theupdat… 

    …eframework#81)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.14.0 to 0.15.0.
- [Commits](golang/crypto@v0.14.0...v0.15.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    19d3aa2 View commit details
    Browse the repository at this point in the history

  195. Update the multirepo example metadata 

    Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    dd861e9 View commit details
    Browse the repository at this point in the history

  196. Updated the default ecdsa p256 key type to not include any parameters. ( 

    theupdateframework#82)

Since TUF spec 1.0.32 the key type for ecdsa does not include the parameters,
they are only part of the key-scheme.
This commit updates the default keytype to not include the parameters, but
includes a compatibility key type to be able to accept metadata compliant
with older versions of the spec.

Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>
    @kommendorkapten @rdimitrov
    kommendorkapten authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    a6d533d View commit details
    Browse the repository at this point in the history

  197. Remove logr dep (theupdateframework#83) 

    * Ignore temporary files from emacs (ends qith '~')

Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>

* Remove dep of go-logr/logr.
Provided is an (almost) logr compatible interface.

Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>

* Remove V method from logger.

Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>

* remove unnecessary variable

Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>

* Removed unnecessary code change

Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>

* ran go mod tidy

Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>

---------

Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>
    @kommendorkapten @rdimitrov
    kommendorkapten authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    a4e8e5f View commit details
    Browse the repository at this point in the history

  198. chore(deps): bump golang.org/x/sys from 0.14.0 to 0.15.0 (theupdatefr… 

    …amework#85)

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.14.0 to 0.15.0.
- [Commits](golang/sys@v0.14.0...v0.15.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    8ec1718 View commit details
    Browse the repository at this point in the history

  199. chore: split actions to tests and linting (theupdateframework#89)

    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    0c0a360 View commit details
    Browse the repository at this point in the history

  200. Added an unsafe method for loading the tuf metadata on disk (theupdat… 

    …eframework#87)

* Added an unsafe method for loading the tuf metadata on disk

Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>

* Feedback from review. Added a config parameter instead of a separate method.

Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>

* Added unit tests for unsafe local mode

Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>

* DEBUG: remove added tests

Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>

* comment out correct test

Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>

* Uncommented tests cases and disabled go caching

Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>

---------

Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>
    @kommendorkapten @rdimitrov
    kommendorkapten authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    4f5046b View commit details
    Browse the repository at this point in the history

  201. chore(deps): bump golang.org/x/crypto from 0.15.0 to 0.16.0 (theupdat… 

    …eframework#84)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.15.0 to 0.16.0.
- [Commits](golang/crypto@v0.15.0...v0.16.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    64d5e15 View commit details
    Browse the repository at this point in the history

  202. chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (t… 

    …heupdateframework#90)

Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.7.5 to 1.7.6.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.7.5...v1.7.6)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    c0014df View commit details
    Browse the repository at this point in the history

  203. chore(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (theupdat… 

    …eframework#92)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.16.0 to 0.17.0.
- [Commits](golang/crypto@v0.16.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    67b624e View commit details
    Browse the repository at this point in the history

  204. chore(deps): bump github.com/sigstore/sigstore from 1.7.6 to 1.8.0 (t… 

    …heupdateframework#93)

Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.7.6 to 1.8.0.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.7.6...v1.8.0)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    5bf5351 View commit details
    Browse the repository at this point in the history

  205. chore(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0 (theupdatefr… 

    …amework#95)

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.15.0 to 0.16.0.
- [Commits](golang/sys@v0.15.0...v0.16.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    68b2a57 View commit details
    Browse the repository at this point in the history

  206. chore(deps): bump golang.org/x/crypto from 0.17.0 to 0.18.0 (theupdat… 

    …eframework#96)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.17.0 to 0.18.0.
- [Commits](golang/crypto@v0.17.0...v0.18.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot @rdimitrov
    dependabot[bot] authored and rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    3b01d64 View commit details
    Browse the repository at this point in the history

  207. Move from rdimitov/go-tuf-metadata to github.com/theupdateframework/g… 

    …o-tuf/v2

Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
    @rdimitrov
    rdimitrov committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    082c914 View commit details
    Browse the repository at this point in the history