Issues

• RFC: support recursive path pattern delegations

  theupdateframework/specification#328 · Filter by author cyphar opened on Sep 14, 2026
  2

• Two definitions of KEYID

  theupdateframework/specification#323 · Filter by author joshuagl opened on Aug 5, 2026

• Problematic delegation walk restriction during "update the targets role" step

  theupdateframework/specification#321 · Filter by author cyphar opened on Aug 5, 2026
  6

• During root update, should we purge trusted timestamp/snapshot after key rotation earlier in the process?

  theupdateframework/specification#318 · Filter by author erickt opened on Jul 7, 2026

• feature: metadata repository visualization

  theupdateframework/specification#312 · Filter by author lukpueh opened on Feb 14, 2025
  25

• Add new keytype-scheme for prehash ?

  theupdateframework/specification#310 · Filter by author udf2457 opened on Jan 14, 2025
  1

• Conflicting signature keyid uniqueness requirements

  theupdateframework/specification#308 · Filter by author lukpueh opened on Aug 19, 2024
  3

• Create Issue Request and PR Template for Repository (tuf-specification)

  theupdateframework/specification#307 · Filter by author shubhusion opened on Jun 8, 2024
  1

• Loosen the keyid verification requirement?

  theupdateframework/specification#305 · Filter by author jku opened on Apr 26, 2024
  3

• Inflexible and incomplete public key distribution formats

  enhancementhelp wanted
  theupdateframework/specification#302 · Filter by author trishankatdatadog opened on Mar 9, 2024
  5

• create-release action unmaintained

  automation
  theupdateframework/specification#280 · Filter by author joshuagl opened on May 15, 2023
  2

• Use formal methods to prove security properties

  theupdateframework/specification#271 · Filter by author Eh2406 opened on Feb 17, 2023
  13

• How do TARGETS interact with delegations?

  theupdateframework/specification#268 · Filter by author Eh2406 opened on Jan 15, 2023
  4

• Document delegation removal in repository operations

  clarificationgood first issue
  theupdateframework/specification#262 · Filter by author joshuagl opened on Nov 18, 2022
  4

  

• It would be really nice to have a collection of test data to test client conformance

  theupdateframework/specification#260 · Filter by author patflynn opened on Oct 23, 2022
  6

• Repository operations: when to update metadata version

  theupdateframework/specification#253 · Filter by author joshuagl opened on Sep 30, 2022

• Does each of the root metadata roles require at least one keyid, and a threshold >= 1?

  theupdateframework/specification#251 · Filter by author erickt opened on Sep 24, 2022
  1

• FileMeta verification guidance with client store representations

  theupdateframework/specification#249 · Filter by author asraa opened on Sep 15, 2022
  2

• It would be nice to have an OpenAPI or JSON Schema for TUF resource types

  theupdateframework/specification#242 · Filter by author patflynn opened on Aug 12, 2022

• root version comparison still unclear

  clarification
  theupdateframework/specification#240 · Filter by author jku opened on Aug 9, 2022
  2

• Clarify client workflow when no new metadata is available

  clarification
  theupdateframework/specification#235 · Filter by author lukpueh opened on Jun 13, 2022
  1

• chore: draft branch notoriously lagging behind

  theupdateframework/specification#229 · Filter by author lukpueh opened on May 24, 2022

• Do we always need to download snapshot and targets?

  theupdateframework/specification#227 · Filter by author erickt opened on May 19, 2022
  7

• avoid trying to update root role every time

  theupdateframework/specification#225 · Filter by author nexustar opened on May 10, 2022
  3

• Repository update races with clients

  theupdateframework/specification#223 · Filter by author znewman01 opened on Apr 25, 2022
  3