theupdateframework/go-tuf

View on GitHub

Go implementation of The Update Framework (TUF)

Stars: 717
Forks: 127
Open beginner issues: 0
Indexed issues: 29
Avg merge: 5d 9h
Merged PRs (30d): 7

Dominant language: Go
License: Apache-2.0
Last GitHub push: Sep 14, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

29 open issues indexed

Incorrect delegation verification (diamond delegation case) Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

theupdateframework/go-tuf#759 · 2 comments · Opened Aug 5, 2026
Potential fragility in path-pattern matching Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

theupdateframework/go-tuf#747 · Opened Jun 19, 2026
multirepo `Refresh()` logic fails on first repo Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

theupdateframework/go-tuf#745 · Opened Jun 19, 2026
go-tuf and Sigstore Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/go-tuf#738 · Opened Jun 8, 2026
FAIL: RsaSuite.TestMarshalUnmarshalPrivateKey: PrivateKey.Precomputed.fips.dP: []uint8[127] != []uint8[128] Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

theupdateframework/go-tuf#728 · 1 comment · Opened Apr 2, 2026
RFE: use `json.RawMessage` for all `UnrecognizedFields` maps Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/go-tuf#724 · Opened Mar 22, 2026
PITCH: Update config to support an allowlist of signing algorithms. Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

theupdateframework/go-tuf#723 · 10 comments · Opened Mar 3, 2026
Run the tuf-conformance test suite for go-tuf Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/go-tuf#700 · 1 comment · Opened Nov 5, 2025
Use streaming semantics for DownloadFile through io.Reader/Writer interfaces instead of byte slices for memory efficiency Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

theupdateframework/go-tuf#689 · 2 comments · Opened Jul 24, 2025
Decouple metadata / target retrieval from HTTP Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

theupdateframework/go-tuf#670 · 1 comment · 1 reaction · Opened Jan 21, 2025
Add Blake2B hash support ? Open

Difficulty 3/5 1-2 days Newbie friendliness 38/100

theupdateframework/go-tuf#668 · 6 comments · 1 reaction · Opened Jan 21, 2025
Issue a release for legacy go-tuf with a deprecated notice for all packages Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

theupdateframework/go-tuf#655 · Opened Oct 15, 2024
feat: Support for setting custom Key IDs Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

theupdateframework/go-tuf#599 · 1 reaction · Opened Jan 31, 2024
tests: Add interoperability tests Open

theupdateframework/go-tuf#598 · 1 comment · 1 assignee · Opened Jan 31, 2024
feat: Support loading and managing keys from files Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/go-tuf#597 · Opened Jan 31, 2024
bug: use the correct format for "expires" (should not include milliseconds) Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

theupdateframework/go-tuf#596 · Opened Jan 31, 2024
feat: Support for downloading target files from a registry (by tag/digest) Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/go-tuf#595 · 1 comment · Opened Jan 31, 2024
feat: Decouple signing Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/go-tuf#594 · Opened Jan 31, 2024
Enable Refresh() to be called more than once Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

theupdateframework/go-tuf#593 · 1 reaction · Opened Jan 31, 2024
Make go-tuf concurrency-safe Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/go-tuf#592 · Opened Jan 31, 2024
Par unnecessary dependencies Open

theupdateframework/go-tuf#589 · 3 comments · 2 reactions · 1 assignee · Opened Jan 31, 2024
TUF specification has a new version - v1.0.33 Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

theupdateframework/go-tuf#546 · Opened Aug 18, 2023
Implement TAP 13 Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/go-tuf#328 · 1 reaction · Opened Jun 24, 2022
Which tests should be required before merge? Open

code health

theupdateframework/go-tuf#320 · 1 comment · 1 assignee · Opened Jun 10, 2022
tests: improve go-tuf testability Open

tests

theupdateframework/go-tuf#305 · 1 comment · 1 assignee · Opened Jun 8, 2022
Implement Fuzzing Open

theupdateframework/go-tuf#177 · 2 comments · 1 reaction · 1 assignee · Opened Nov 30, 2021
Allow generating TUF metadata using DSSE Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

theupdateframework/go-tuf#176 · 2 reactions · Opened Nov 18, 2021
Implementing TAP for TUF developer key management Open

Difficulty 5/5 Over a week Newbie friendliness 28/100

theupdateframework/go-tuf#161 · 2 comments · Opened Sep 29, 2021
Client accepts expires values in non-UTC timezones Open

good first issue

Difficulty 3/5 1-2 days Newbie friendliness 35/100

theupdateframework/go-tuf#136 · 3 comments · Opened Jun 28, 2021

theupdateframework/go-tuf

Get new issues in your inbox