theupdateframework / theupdateframework/python-tuf
Change `securesystemslib.dsse.Envelope.signatures` to dict upstream
Open
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 1.7k
- Forks
- 304
- Avg merge
- 1d 2h
- Merged PRs (30d)
- 17
Description
yeah, the TODO feels right -- even if the serialized format is a list, that's just `list(self.signatures.values())` away if self.signatures is a dict
Originally posted by @jku in https://github.com/theupdateframework/python-tuf/pull/2436#discussion_r1482773245
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating securesystemslib.dsse.Envelope and its signatures handling, then review the linked discussion and the current serialized representation. Determine the upstream API change needed to store signatures as a dict while preserving list serialization through the values. Done means the upstream change and its compatibility behavior are defined and covered by relevant tests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100