Skip to content
This repository has been archived by the owner on Mar 29, 2022. It is now read-only.

Latest commit

 

History

History
86 lines (67 loc) · 2.96 KB

PROJECT.md

File metadata and controls

86 lines (67 loc) · 2.96 KB
Raw

Maintainers

The project is currently managed by Justin Cappos at New York University.

Consensus Builder:

  Justin Cappos
    Email: jcappos@nyu.edu
    GitHub username: @JustinCappos
    PGP fingerprint: E9C0 59EC 0D32 64FA B35F  94AD 465B F9F6 F8EB 475A

Maintainers:

  Lukas Puehringer
    Email: lukas.puehringer@nyu.edu
    GitHub username: @lukpueh
    PGP fingerprint: 8BA6 9B87 D43B E294 F23E  8120 89A2 AD3C 07D9 62E8

  Santiago Torres
    Email: santiago@nyu.edu
    GitHub username: @SantiagoTorres
    PGP fingerprint: 903B AB73 640E B6D6 5533  EFF3 468F 122C E816 2295

  Marina Moore
    Email: mm9693@nyu.edu
    GitHub username: @mnm678

  Sebastien Awwad
    Email: sebastien.awwad@gmail.com
    GitHub username: @awwad
    PGP fingerprint: C2FB 9C91 0758 B682 7BC4  3233 BC0C 6DED D5E5 CC03

Contributions

We welcome a variety of different kinds of contributions.

Code Contributions

If you would like to make contributions to this repository, for the reference implementation or the demonstration code (or the documentation here), you are encouraged to submit a GitHub pull request to this repository. Please follow these development instructions. Ideally, please include unit tests for any new software feature or change.

Submitted pull requests undergo review and automated testing, including, but not limited to:

  • Unit and build testing via Travis CI
  • Review by one or more maintainers

Code Issues, Bugs, Feature Requests

Issues with the reference implementation or demonstration code in this repository (e.g. bugs, feature requests, security issues specifically with the code) should be noted in this repository as issues.

Security Audits

We welcome security audits of the Uptane design, or vulnerability reports of the design or the code in this repository. Please contact Justin Cappos and Sebastien Awwad via the contact information above. Uptane is defined in the three documents listed here.

Should the information be highly sensitive, auditors / reporters may employ PGP encryption in an email to Justin Cappos using the public key whose PGP fingerprint is listed above.

Audits of TUF alone (which Uptane employs) should instead be submitted per these instructions.

Design Contributions

One can propose changes to the system design by submitting comments to the following documents (or contacting the uptane@googlegroups.com mailing list):