theupdateframework/python-tuf

View on GitHub

Python reference implementation of The Update Framework (TUF)

Stars: 1.7k
Forks: 304
Open beginner issues: 0
Indexed issues: 58
Avg merge: 1d 2h
Merged PRs (30d): 17

Dominant language: Python
License: Apache-2.0
Last GitHub push: Sep 15, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

58 open issues indexed

switch to main branch? Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

theupdateframework/python-tuf#3001 · Opened Aug 25, 2026
Request: independently verifiable source signing and reproducible-build details for v7.0.0 Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

theupdateframework/python-tuf#2979 · 1 comment · Opened Aug 7, 2026
Use Immutable Releases Open

enhancement github_actions

Difficulty 3/5 1-2 days Newbie friendliness 45/100

theupdateframework/python-tuf#2920 · 1 comment · 2 reactions · Opened Mar 12, 2026
Investigate/test fetcher retries Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

theupdateframework/python-tuf#2842 · 3 comments · Opened Jun 12, 2025
ngclient: Be better with concurrent instances Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/python-tuf#2836 · 7 comments · Opened May 22, 2025
ngclient: support `StorageBackendInterface`? Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

theupdateframework/python-tuf#2676 · 2 comments · 1 reaction · Opened Jul 18, 2024
Enhancing The Update Framework (Python - TUF) README Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

theupdateframework/python-tuf#2654 · 6 comments · Opened Jun 8, 2024
Enhance TUF Documentation with Architecture Diagrams and Visual Aids Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

theupdateframework/python-tuf#2639 · 1 comment · Opened May 23, 2024
possible blog post: Caching TUF metadata Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

theupdateframework/python-tuf#2605 · 3 comments · 5 reactions · Opened Apr 12, 2024
Test all components with DSSE Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

theupdateframework/python-tuf#2565 · Opened Feb 21, 2024
Change `securesystemslib.dsse.Envelope.signatures` to dict upstream Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

theupdateframework/python-tuf#2564 · 2 comments · Opened Feb 21, 2024
repository: maybe provide a Repository.get_delegating_role() Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/python-tuf#2552 · 2 comments · Opened Feb 4, 2024
Consider including `securesystemslib[crypto]` as a dependency in TUF Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

theupdateframework/python-tuf#2539 · 5 comments · Opened Dec 28, 2023
repository: redesign needed after recent verify_delegate changes Open

discussion

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/python-tuf#2493 · 1 comment · Opened Oct 17, 2023
ngclient: Make updater.config immutable Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/python-tuf#2471 · Opened Sep 27, 2023
blog post about choosing your repository implementation Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/python-tuf#2452 · 2 comments · 3 reactions · Opened Aug 31, 2023
TUF specification has a new version - v1.0.32 Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/python-tuf#2394 · Opened May 16, 2023
metadata API: serialization is missing a final newline Open

Difficulty 2/5 1-3 hours Newbie friendliness 38/100

theupdateframework/python-tuf#2393 · 2 comments · 2 reactions · Opened May 16, 2023
Implementation of Offline mode for TUF Open

low-prio

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/python-tuf#2359 · 14 comments · 3 reactions · Opened Apr 16, 2023
Snapshot and Timestamp default content Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/python-tuf#2307 · 6 comments · Opened Feb 23, 2023
Being more explicit with documenting public API Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/python-tuf#2235 · 3 comments · Opened Dec 19, 2022
repository module: Add tests Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

theupdateframework/python-tuf#2228 · 1 comment · 1 reaction · Opened Dec 17, 2022
ngclient feature: Add option to only update metadata if needed Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/python-tuf#2225 · 3 comments · Opened Dec 14, 2022
Examples: ship bootstrap root.jsons for well-known repositories Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

theupdateframework/python-tuf#2206 · 1 comment · Opened Dec 5, 2022
docs: Include the relevant securesystemslib classes in docs Open

documentation

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

theupdateframework/python-tuf#2167 · 2 comments · 1 reaction · Opened Nov 5, 2022
design spec_version updates Open

discussion enhancement repository

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/python-tuf#2077 · 2 comments · Opened Aug 13, 2022
Try constructor improvements for Delegations/ delegated roles Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

theupdateframework/python-tuf#2071 · 3 comments · 2 reactions · Opened Aug 11, 2022
How to perform modifications on bins handled by succinct hash bin delegations? Open

discussion

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/python-tuf#2052 · 5 comments · Opened Jul 7, 2022
Implement TAP 14 Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/python-tuf#2040 · 6 comments · Opened Jun 24, 2022
Must signed.version be incremented every time a role is re-signed? Open

documentation repository

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/python-tuf#2020 · 21 comments · Opened Jun 8, 2022
document dependabot PR review strategy Open

documentation

theupdateframework/python-tuf#2014 · 11 comments · 2 assignees · Opened Jun 1, 2022
RFE: expose delegated metadata to client application Open

enhancement ngclient

Difficulty 5/5 Over a week Newbie friendliness 32/100

theupdateframework/python-tuf#1995 · 16 comments · Opened May 4, 2022
cd: re-enable release signing Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

theupdateframework/python-tuf#1966 · 6 comments · Opened Apr 21, 2022
Add some more generated metadata files Open

backlog testing

Difficulty 4/5 3-5 days Newbie friendliness 32/100

theupdateframework/python-tuf#1920 · 2 comments · 1 reaction · Opened Mar 23, 2022
compatibility: bottlerocket metadata uses microseconds in expiry Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/python-tuf#1857 · 1 comment · Opened Feb 11, 2022
Restructure docs directory Open

documentation low-prio

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/python-tuf#1849 · 3 comments · 1 reaction · Opened Feb 9, 2022
Review coverage report about non-tested statements Open

backlog testing

theupdateframework/python-tuf#1842 · 4 comments · 1 assignee · Opened Feb 8, 2022
ngclient: make update progress easier to follow in logs Open

backlog enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

theupdateframework/python-tuf#1804 · Opened Jan 28, 2022
doc: consider re-adding python-tuf attack protection demo Open

backlog documentation

Difficulty 4/5 3-5 days Newbie friendliness 38/100

theupdateframework/python-tuf#1798 · 1 comment · Opened Jan 26, 2022
doc: consider re-adding a "quickstart" document Open

backlog documentation

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/python-tuf#1797 · 7 comments · Opened Jan 26, 2022
Revise test_updater_ng.py Open

testing

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/python-tuf#1748 · Opened Dec 23, 2021
Testing specific sequences the client should be able to handle Open

testing

Difficulty 4/5 3-5 days Newbie friendliness 25/100

theupdateframework/python-tuf#1747 · Opened Dec 23, 2021
Improve docstrings on exceptions Open

backlog documentation

Difficulty 3/5 1-2 days Newbie friendliness 45/100

theupdateframework/python-tuf#1733 · 3 comments · Opened Dec 17, 2021
Create simple test for examples/client_example Open

testing

Difficulty 3/5 1-2 days Newbie friendliness 38/100

theupdateframework/python-tuf#1717 · 2 comments · Opened Dec 8, 2021
ngtests: improve _assert* methods Open

backlog testing

theupdateframework/python-tuf#1669 · 1 assignee · Opened Nov 9, 2021
Metadata API: Metadata "factory" constructors misbehave with inheritance Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/python-tuf#1665 · 11 comments · Opened Nov 8, 2021
ngclient: max_root_rotations value is very small Open

discussion ngclient

Difficulty 4/5 3-5 days Newbie friendliness 25/100

theupdateframework/python-tuf#1577 · 1 comment · Opened Sep 10, 2021
ngclient: feature request "download target as bytes" Open

enhancement ngclient

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/python-tuf#1556 · 2 comments · Opened Sep 1, 2021
tests: test infrastructure (setup/teardown) improvements Open

enhancement testing

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/python-tuf#1348 · 1 comment · Opened Apr 12, 2021
New API: Don't hardcode metadata files extension Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/python-tuf#1333 · 1 comment · Opened Apr 6, 2021

theupdateframework/python-tuf

Get new issues in your inbox